Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/08/2026, 07:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_cdcd4802b6ec6a4ae26dd902e8dc89dc_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_cdcd4802b6ec6a4ae26dd902e8dc89dc_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-02_cdcd4802b6ec6a4ae26dd902e8dc89dc_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
- Size 15.2MB
- Sample260802-jtyxeser9t
- SHA256 7eadd550b59235d5eb78564ed4fe6551187c16ff71aee1125aac8f8b12222a39
- MD5 cdcd4802b6ec6a4ae26dd902e8dc89dc
- SHA1 e753479fa38440beb9ca1369b52a11b868220405
- SHA512 00e1cd219a41997fb0c347342a45725fe2fdfc76a1c190da0243cc56fa5763404f869d15cefcba8c81f03a1886f1cb5e02a285517ce4463a372b6d67fab996da
- SSDEEP 196608:+EUlKfqbJeRhb5E7cRGo8sOgZo0aHqaEttjez1w5T2bZSf1A9KMV583opoVop:WwibJejRaEtAzhbZWsH58Lu
- TLSH T19FF69D02BA9A59EAD19DC870C3474B678F2274CB0636F5BF46C402292F6E7B51F2D316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4936 2026-08-02_cdcd4802b6ec6a4ae26dd902e8dc89dc_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4936 2026-08-02_cdcd4802b6ec6a4ae26dd902e8dc89dc_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-02_cdcd4802b6ec6a4ae26dd902e8dc89dc_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-02_cdcd4802b6ec6a4ae26dd902e8dc89dc_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:4936
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
2026-08-02_cdcd4802b6ec6a4ae26dd902e8dc89dc_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar4936_debug_log.txt
- Path C:\ProgramData\Dell\UpdatePackage\log\support\2026-08-02_cdcd4802b6ec6a4ae26dd902e8dc89dc_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar4936_debug_log.txt
- Size 3KB
- SHA256 e4c1004b01e203a5a94c5509bf947f8273892620ffadfda9ebed61106fb7589f
- MD5 c78e83f69d2bbaff0681aa30d1bc573f
- SHA1 be27d107f467addd1d01477a51f24e1ce4262d1e
- SHA512 c0a3e8af2e92f307423a32303d44caf8960f4738df698402eb5bb59e5531c4ef130465df0f874c44fd025961ce318638b8218b6103e3eaf86846efeb3f612357
- TLSH T1E771BE120EF6F27B2A87A74DA5DCF87D48053C16D20A5C33FB5C48861766B4814BBD9C
- MD5 SHA1 SHA512 TLSH
2026-08-02_cdcd4802b6ec6a4ae26dd902e8dc89dc_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar4936_debug_log.txt
- Path C:\ProgramData\Dell\UpdatePackage\log\support\2026-08-02_cdcd4802b6ec6a4ae26dd902e8dc89dc_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar4936_debug_log.txt
- Size 1KB
- SHA256 76f190cc5f55b1163ead96f4c07aa3d3caa0bc19b39f1c1be7e7a00b86c597a6
- MD5 c3c397f8a11059ea413fb3174dc33aa5
- SHA1 bf8b36bfcaddfc87906a34632ed28b42bf7424de
- SHA512 5443f0125f0088b8815c18fb3ca5ce9df589bea3660422ed26689ab1120bc994f14e3229089c028cedd9a3b9a4b00324da6c0251380f48fa7efdf6c29212add6
- TLSH T1FC3136120EEAA27B2E9B9B4C498C787958467C56D2065C33FF5C0687171AB0814FBE9D
- MD5 SHA1 SHA512 TLSH