General
- Target 2026-08-02_24e3eca0f6612d250f802dbe4aee2500_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- Sample260803-a131aahq8s
- SHA256 ae113b2996ca457cb4d91fbbfa6afc295451bab4b4f451792ea1bced35635390
- MD5 24e3eca0f6612d250f802dbe4aee2500
- SHA1 424742a954cc3523f9b121d30045f20a17e7c0a3
- SHA512 e65e54b760c62c7d872b17c6cafb63cc0b44a0ecf58dfbb23d651dc9b8ca2c59f3398678652a4eb16c2ce050c7b546b2575fbfde37a81116f803877264017176
- SSDEEP 49152:r+/PivcpfQvdaKYXf3Cleyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN755wm:6/PvOBjcXvvOOc5G5SSDntdDpbRZy
- TLSH T10E165A1E735885E9D5A6D1BD8A428506F271F801C73266CF26A4875E2FFB7E34E3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_24e3eca0f6612d250f802dbe4aee2500_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_24e3eca0f6612d250f802dbe4aee2500_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- SHA256 ae113b2996ca457cb4d91fbbfa6afc295451bab4b4f451792ea1bced35635390
- MD5 24e3eca0f6612d250f802dbe4aee2500
- SHA1 424742a954cc3523f9b121d30045f20a17e7c0a3
- SHA512 e65e54b760c62c7d872b17c6cafb63cc0b44a0ecf58dfbb23d651dc9b8ca2c59f3398678652a4eb16c2ce050c7b546b2575fbfde37a81116f803877264017176
- SSDEEP 49152:r+/PivcpfQvdaKYXf3Cleyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN755wm:6/PvOBjcXvvOOc5G5SSDntdDpbRZy
- TLSH T10E165A1E735885E9D5A6D1BD8A428506F271F801C73266CF26A4875E2FFB7E34E3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1