2026-08-01_2fbea58da746424aba2113d16631b930_akira_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_rusty-stealer_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_2fbea58da746424aba2113d16631b930_akira_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_rusty-stealer_satacom_vidar
Size 9.0MB
Sample260801-d4r9qsda63
SHA256 d52169ba4da7265f6eaa2623c87b28f4cce7d9ac3c393d53b24bb4100851f56c
MD5 2fbea58da746424aba2113d16631b930
SHA1 dab559e6d0c9cafac1cf76a2426a81920dd65fd5
SHA512 5e9b5235bd35eb97b61bc3c2525e1b931c9750f4d391ad4a899f188ecb13be70dd1fb5fec7f5f3ccc0cabc2227c5cbe7893461dbd7614ef65249c187b82e256e
SSDEEP 24576:gf/f5C7+D1oPK8xQOOOOOOOOOOOOOOOOyyyyyyyyyyyyyyyVwwwwwwwwwwwwwwwF:gf/xC7+ap7t6
TLSH
T1C796F0C498ECC0B680B4B7581D8A614FD77EB745A84B20AD23FC5150FAF1A9DF60DAD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_2fbea58da746424aba2113d16631b930_akira_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_rusty-stealer_satacom_vidar

File Explorer

2026-08-01_2fbea58da746424aba2113d16631b930_akira_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_rusty-stealer_satacom_vidar

.exe 9.0MB

2026-08-01_2fbea58da746424aba2113d16631b930_akira_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_rusty-stealer_satacom_vidar

IMPHASH d1fa0a278bd8270ae1d8ebb13533e426
SHA256 d52169ba4da7265f6eaa2623c87b28f4cce7d9ac3c393d53b24bb4100851f56c
MD5 2fbea58da746424aba2113d16631b930
SHA1 dab559e6d0c9cafac1cf76a2426a81920dd65fd5
SHA512 5e9b5235bd35eb97b61bc3c2525e1b931c9750f4d391ad4a899f188ecb13be70dd1fb5fec7f5f3ccc0cabc2227c5cbe7893461dbd7614ef65249c187b82e256e
SSDEEP 24576:gf/f5C7+D1oPK8xQOOOOOOOOOOOOOOOOyyyyyyyyyyyyyyyVwwwwwwwwwwwwwwwF:gf/xC7+ap7t6
TLSH
T1C796F0C498ECC0B680B4B7581D8A614FD77EB745A84B20AD23FC5150FAF1A9DF60DAD8
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

501848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetFileSizeEx HeapSize FlushFileBuffers LCMapStringW CompareStringW VirtualProtect CloseHandle SetFilePointerEx GetLastError HeapReAlloc InitializeCriticalSectionEx GetCurrentProcessId GetCurrentThreadId GetTickCount FlsFree GetSystemInfo GetSystemTimePreciseAsFileTime HeapFree GetProcessHeap AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress GetCurrentProcess lstrlenW ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP FlsSetValue WaitForSingleObject FlsGetValue MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW CreateDirectoryW GetFullPathNameW FindFirstFileExW FindClose CreateFileW SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx FlsAlloc GetModuleHandleW FormatMessageW GetModuleHandleA WriteFileEx SleepEx ReadFileEx CompareStringOrdinal GetModuleFileNameW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileAttributesW DuplicateHandle CreateThread CreateMutexA GetStringTypeW SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx EncodePointer RaiseException EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RtlPcToFileHeader GetFileType GetModuleHandleExW WriteFile ExitProcess GetCommandLineA GetCommandLineW OutputDebugStringW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo SetEnvironmentVariableW

user32

DestroyWindow CreateWindowExW ShutdownBlockReasonCreate ShutdownBlockReasonDestroy

winhttp

WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpConnect WinHttpOpen WinHttpCloseHandle WinHttpQueryDataAvailable

shell32

IsUserAnAdmin

advapi32

RegSetValueExW RegCloseKey RegCreateKeyExW

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile NtCreateNamedPipeFile NtOpenFile

Name

.8gn56pa

Size

593KB

Virtual Size

592KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.q6a33ul

Size

8.2MB

Virtual Size

8.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.11islb1

Size

6KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.g8jkuyz

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hspvl85

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.6mtxwk7

Size

168KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.b060cq5

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_2fbea58da746424aba2113d16631b930_akira_cobalt-strike_funksec_glassworm_icedid_luca-stealer_njrat_rusty-stealer_satacom_vidar

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

user32

winhttp

shell32

advapi32

ntdll

generic