2026-08-01_08e1c03926dcf0ab97a6192907e6ba17_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_08e1c03926dcf0ab97a6192907e6ba17_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar
Size 875KB
Sample260801-v7vmpsdr8w
SHA256 4c662fa84e5f21f91c1e95d5fc2116dee8116fbc1e22161715ea7d158fbd23cd
MD5 08e1c03926dcf0ab97a6192907e6ba17
SHA1 ba5227a117a855fb8b0c89bb8da599ca3cbff9c8
SHA512 60d1e63598dcd7f70440db48da85ec79e17921c67c3fdd7f760fb9d016f7502f23ffe3f3174b44d0d78b3b4a490e6b459e7acdb2eca82084ee55c9ab0d4d9dee
SSDEEP 12288:q2++jqWcG8brq6mCmNJ2KXhb1nc+qHmjGdSt/BD5Dt9INd:I++WcGuqbLlXh5yHmjt/BDtI
TLSH
T12F15AEA6E2509DE8D06BC0388789D962A7727C4507E166EF078806721F29BD3DBFC7D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_08e1c03926dcf0ab97a6192907e6ba17_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

File Explorer

2026-08-01_08e1c03926dcf0ab97a6192907e6ba17_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

.exe 875KB

2026-08-01_08e1c03926dcf0ab97a6192907e6ba17_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

IMPHASH 2c6364395f3ae77b6f0cc4c8620b846a
SHA256 4c662fa84e5f21f91c1e95d5fc2116dee8116fbc1e22161715ea7d158fbd23cd
MD5 08e1c03926dcf0ab97a6192907e6ba17
SHA1 ba5227a117a855fb8b0c89bb8da599ca3cbff9c8
SHA512 60d1e63598dcd7f70440db48da85ec79e17921c67c3fdd7f760fb9d016f7502f23ffe3f3174b44d0d78b3b4a490e6b459e7acdb2eca82084ee55c9ab0d4d9dee
SSDEEP 12288:q2++jqWcG8brq6mCmNJ2KXhb1nc+qHmjGdSt/BD5Dt9INd:I++WcGuqbLlXh5yHmjt/BDtI
TLSH
T12F15AEA6E2509DE8D06BC0388789D962A7727C4507E166EF078806721F29BD3DBFC7D4
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

297888

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

SenseAPToast.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

advapi32

EventWriteEx EventSetInformation EventRegister EventUnregister

kernel32

CreateFileW FlsAlloc CloseHandle GetCommandLineW SetLastError GetModuleFileNameW GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc SwitchToThread GetCurrentProcessId WaitForSingleObject GetStdHandle GetConsoleMode MultiByteToWideChar WriteConsoleW GetModuleHandleA GetProcAddress CreateWaitableTimerExW SetWaitableTimer Sleep GetModuleHandleW FormatMessageW GetCurrentDirectoryW WaitForSingleObjectEx LoadLibraryA GetCurrentProcess lstrlenW CreateMutexA WideCharToMultiByte ReleaseMutex RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetEnvironmentVariableW CreateThread ExitProcess QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimePreciseAsFileTime HeapAlloc LoadLibraryExA FreeLibrary SetFilePointerEx GetConsoleOutputCP FlushFileBuffers HeapSize LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx EncodePointer RaiseException EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW RtlPcToFileHeader WriteFile GetModuleHandleExW GetCommandLineA FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsGetValue

ole32

CoInitializeEx CoIncrementMTAUsage CoCreateInstance

oleaut32

SetErrorInfo SysStringLen GetErrorInfo SysFreeString VariantClear SysAllocStringLen

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

ntdll

RtlNtStatusToDosError NtWriteFile

Name

.text

Size

348KB

Virtual Size

348KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

105KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

952B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

400KB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_08e1c03926dcf0ab97a6192907e6ba17_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

api-ms-win-core-synch-l1-2-0

bcryptprimitives

advapi32

kernel32

ole32

oleaut32

api-ms-win-core-winrt-l1-1-0

ntdll

generic