2026-08-01_7fdad15d38c44af4039bd440ec83b6e0_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_7fdad15d38c44af4039bd440ec83b6e0_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar
Size 4.7MB
Sample260802-apavcsah57
SHA256 6167be94c33b2a86f9820cbc1b901700cf5d690193213cb14f44687dd4ed4e18
MD5 7fdad15d38c44af4039bd440ec83b6e0
SHA1 4eb4232bee4b5502a1ded712ef3d45b5e553d240
SHA512 164b84f4a8600eca7d811ac519ee941c6316cc39b5b85bcb52c9784e3e8badefd4f45ec4a028dea0e2a6dd331d0c33360d1eddd1eafaa0a8677fdd947e93e78b
SSDEEP 49152:Mu/ggdwof3JeNoooGcnPsrrdbWTsTBwr2yDgGuWFYVQYOOFekUHdw6trL7bS9gCl:+gdwofZedwsTB6+3W89gCJ+imlfmH+
TLSH
T1DA3619117A6B98BDD19AC4B483464A735E2274CB0B36B9FF01C452393F6ABF02F2D615
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_7fdad15d38c44af4039bd440ec83b6e0_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar

File Explorer

2026-08-01_7fdad15d38c44af4039bd440ec83b6e0_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar

.exe 4.7MB

2026-08-01_7fdad15d38c44af4039bd440ec83b6e0_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar

IMPHASH 160fbdb81ce4965fa57cff73b4673255
SHA256 6167be94c33b2a86f9820cbc1b901700cf5d690193213cb14f44687dd4ed4e18
MD5 7fdad15d38c44af4039bd440ec83b6e0
SHA1 4eb4232bee4b5502a1ded712ef3d45b5e553d240
SHA512 164b84f4a8600eca7d811ac519ee941c6316cc39b5b85bcb52c9784e3e8badefd4f45ec4a028dea0e2a6dd331d0c33360d1eddd1eafaa0a8677fdd947e93e78b
SSDEEP 49152:Mu/ggdwof3JeNoooGcnPsrrdbWTsTBwr2yDgGuWFYVQYOOFekUHdw6trL7bS9gCl:+gdwofZedwsTB6+3W89gCJ+imlfmH+
TLSH
T1DA3619117A6B98BDD19AC4B483464A735E2274CB0B36B9FF01C452393F6ABF02F2D615
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

197008

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

antispam_launcher.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

bcryptprimitives

ProcessPrng

advapi32

RegCloseKey RegCreateKeyExW RegSetValueExW

kernel32

GetLastError SetLastError CloseHandle CreateWaitableTimerExW HeapFree WaitForSingleObject Sleep AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread HeapReAlloc SetWaitableTimer GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry GetCurrentProcessId CreateMutexA WaitForSingleObjectEx LoadLibraryA GetProcAddress GetCurrentProcess lstrlenW ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP SetFilePointerEx GetProcessHeap MultiByteToWideChar WriteConsoleW GetEnvironmentVariableW GetModuleHandleA GetModuleHandleW FormatMessageW GetTempPathW FlushFileBuffers GetFullPathNameW CreateFileW SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx FindFirstFileExW FindClose ReadConsoleW CompareStringOrdinal GetModuleFileNameW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileAttributesW DuplicateHandle CreateThread CreateNamedPipeW ReadFileEx WriteFileEx SleepEx WaitForMultipleObjects GetOverlappedResult GetExitCodeProcess CreateEventW CancelIo ReadFile ExitProcess HeapAlloc HeapSize QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent RtlUnwindEx RtlPcToFileHeader RaiseException EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW WriteFile TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW

ntdll

RtlNtStatusToDosError NtWriteFile NtReadFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_7fdad15d38c44af4039bd440ec83b6e0_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar

api-ms-win-core-synch-l1-2-0

bcryptprimitives

advapi32

kernel32

ntdll

generic