General
- Target 2026-08-02_9563043ea1e6397a5fbe1a0b98c2a395_akira_cobalt-strike_darkgate_elex_gcleaner_icedid_njrat_vidar
- Size 1.9MB
- Sample260803-aam65sthld
- SHA256 99400a17e7ab992da5b419fbe5c47b863f87296c4e086d2c9e3c9b680ee8d92a
- MD5 9563043ea1e6397a5fbe1a0b98c2a395
- SHA1 a8252a80b254534884b721090bb0314a0f25ed20
- SHA512 af8bb445950739a88f7c6b238b5cb64d7aeb332aeae0372528438630aa42877ac4ff2e864f9490534c8467a591367fac9b76099f58df56e6d3df0f0cc28fecec
- SSDEEP 24576:f2JymgH/cPBGe8GbF5LSobvaDQbcm0BssACewF6Fb+:ukjfcPBJ8GbDLSobiDMcdGsbJl
- TLSH T17195C3377297D0E4C42D9074CF161AF1A5A17C68CBE597DB02C8FE25BB326D07AB9209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_9563043ea1e6397a5fbe1a0b98c2a395_akira_cobalt-strike_darkgate_elex_gcleaner_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_9563043ea1e6397a5fbe1a0b98c2a395_akira_cobalt-strike_darkgate_elex_gcleaner_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_9563043ea1e6397a5fbe1a0b98c2a395_akira_cobalt-strike_darkgate_elex_gcleaner_icedid_njrat_vidar
- Size 1.9MB
- SHA256 99400a17e7ab992da5b419fbe5c47b863f87296c4e086d2c9e3c9b680ee8d92a
- MD5 9563043ea1e6397a5fbe1a0b98c2a395
- SHA1 a8252a80b254534884b721090bb0314a0f25ed20
- SHA512 af8bb445950739a88f7c6b238b5cb64d7aeb332aeae0372528438630aa42877ac4ff2e864f9490534c8467a591367fac9b76099f58df56e6d3df0f0cc28fecec
- SSDEEP 24576:f2JymgH/cPBGe8GbF5LSobvaDQbcm0BssACewF6Fb+:ukjfcPBJ8GbDLSobiDMcdGsbJl
- TLSH T17195C3377297D0E4C42D9074CF161AF1A5A17C68CBE597DB02C8FE25BB326D07AB9209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.