2026-08-02_c8c3b6da45a19e3fa9a721341f72f2a0_akira_cobalt-strike

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_c8c3b6da45a19e3fa9a721341f72f2a0_akira_cobalt-strike
Size 836KB
Sample260802-mvt7ea1dkd
SHA256 467f69756eaa75db97126ff874d89e193f1b8c0ed294d952f912ad6c45267353
MD5 c8c3b6da45a19e3fa9a721341f72f2a0
SHA1 a3d6e485d9835756fafee6fba291b098308143b6
SHA512 935904e85511422eeefdbc15d3291a96a35429a4b429b9843b23b7db2c408e692a1ed3fa0b95f5455b5cb6e1bc95e476be5e2181f6756d0d00a2b757b649f830
SSDEEP 12288:btzIJPr8nMRYNDlWI1uDQ7VgaFI5SQgdMMU43nLn0YKB3X3uOO:bt+PnRYN5WIACWI4lWLv23X3NO
TLSH
T12905D0797A105CB8E15EC036C7A7A5B9673738930A127CAB41B4BBB01E73B61FF05A05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-02_c8c3b6da45a19e3fa9a721341f72f2a0_akira_cobalt-strike

File Explorer

2026-08-02_c8c3b6da45a19e3fa9a721341f72f2a0_akira_cobalt-strike

.exe 836KB

2026-08-02_c8c3b6da45a19e3fa9a721341f72f2a0_akira_cobalt-strike

IMPHASH a97bdfe93e537c02b8a9241e76cd8061
SHA256 467f69756eaa75db97126ff874d89e193f1b8c0ed294d952f912ad6c45267353
MD5 c8c3b6da45a19e3fa9a721341f72f2a0
SHA1 a3d6e485d9835756fafee6fba291b098308143b6
SHA512 935904e85511422eeefdbc15d3291a96a35429a4b429b9843b23b7db2c408e692a1ed3fa0b95f5455b5cb6e1bc95e476be5e2181f6756d0d00a2b757b649f830
SSDEEP 12288:btzIJPr8nMRYNDlWI1uDQ7VgaFI5SQgdMMU43nLn0YKB3X3uOO:bt+PnRYN5WIACWI4lWLv23X3NO
TLSH
T12905D0797A105CB8E15EC036C7A7A5B9673738930A127CAB41B4BBB01E73B61FF05A05
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

48:cd:d4:b2:2f:a4:8f:e0:89:c5:73:d7:a0:76:05:06:dc:9c:05:1a:b3:3f:57:c8:c6:1f:ff:ae:d4:25:24:7e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Kitty Cyber Security Solutions LLC,O=Kitty Cyber Security Solutions LLC,L=Perm,C=RU

Chains

Aug 1, 2026

CN=Kitty Cyber Security Solutions LLC,O=Kitty Cyber Security Solutions LLC,L=Perm,C=RU

Subject

CN=Kitty Cyber Security Solutions LLC,O=Kitty Cyber Security Solutions LLC,L=Perm,C=RU

Serial Number

6c:8b:46:20:20:06:2f:b0:4c:a9:b4:b7:cc:45:5b:56

Issuer

CN=Kitty Cyber Security Solutions LLC,O=Kitty Cyber Security Solutions LLC,L=Perm,C=RU

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 31, 2026 - Jul 31, 2031

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

5104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CreateFileMappingA CreateFileW CreateToolhelp32Snapshot DeleteCriticalSection DuplicateHandle EnterCriticalSection GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetProcAddress GetProcessHeap GetStdHandle HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection LeaveCriticalSection MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForSingleObject WriteConsoleW __C_specific_handler

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _exit _fmode _fpreset _initterm _onexit abort calloc exit fprintf free fwrite malloc memcmp memcpy memmove memset signal strlen strncmp vfprintf

ntdll

NtWriteFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

Name

.text

Size

248KB

Virtual Size

247KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

387KB

Virtual Size

386KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

167KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

768B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_c8c3b6da45a19e3fa9a721341f72f2a0_akira_cobalt-strike

PE Signature issue

kernel32

msvcrt

ntdll

api-ms-win-core-synch-l1-2-0

generic