2026-08-03_208adbe2795c9c17e3e4c7d8ea5bb095_akira_cobalt-strike

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_208adbe2795c9c17e3e4c7d8ea5bb095_akira_cobalt-strike
Size 2.2MB
Sample260803-deb68axcld
SHA256 6aa550b813d933640454f36f78405856996e31d0dfa6bc75b5d1a109c89eb0ac
MD5 208adbe2795c9c17e3e4c7d8ea5bb095
SHA1 1ca592a2119804c4ba8e4536a7d660ede3104a47
SHA512 6b5a27b988166b4303aea7ebbe49c3ffcfbe37c9894b6d1854ffb00b7dd906a525e8eea83e2fd3ba230cd45f1d612b9b020bf17566b2dc11cd90fb134d45aaa0
SSDEEP 49152:G6wBTpA5hCR6RR++yd+Ne7RoeSuNFul+UsppQ8UvmSHZI4JdkFYvaRVqCvQdnwDg:XwBqK8RR++yd+Ne7RoeSuNFul+UsppQz
TLSH
T12DB5AE526655C951EC1F8030C1D9BB3E6124F28BA226AFBB3C847D79CCE2ECB4B55781
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_208adbe2795c9c17e3e4c7d8ea5bb095_akira_cobalt-strike

File Explorer

2026-08-03_208adbe2795c9c17e3e4c7d8ea5bb095_akira_cobalt-strike

.exe 2.2MB

2026-08-03_208adbe2795c9c17e3e4c7d8ea5bb095_akira_cobalt-strike

IMPHASH 4dab6836c8e2ace06d6f9c48be667710
SHA256 6aa550b813d933640454f36f78405856996e31d0dfa6bc75b5d1a109c89eb0ac
MD5 208adbe2795c9c17e3e4c7d8ea5bb095
SHA1 1ca592a2119804c4ba8e4536a7d660ede3104a47
SHA512 6b5a27b988166b4303aea7ebbe49c3ffcfbe37c9894b6d1854ffb00b7dd906a525e8eea83e2fd3ba230cd45f1d612b9b020bf17566b2dc11cd90fb134d45aaa0
SSDEEP 49152:G6wBTpA5hCR6RR++yd+Ne7RoeSuNFul+UsppQ8UvmSHZI4JdkFYvaRVqCvQdnwDg:XwBqK8RR++yd+Ne7RoeSuNFul+UsppQz
TLSH
T12DB5AE526655C951EC1F8030C1D9BB3E6124F28BA226AFBB3C847D79CCE2ECB4B55781
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

advapi32

RegCloseKey RegCreateKeyExW RegDeleteValueW RegOpenKeyExW RegSetValueExW

kernel32

AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CopyFileExW CreateDirectoryW CreateEventW CreateFileMappingA CreateFileW CreateHardLinkW CreatePipe CreateProcessW CreateSymbolicLinkW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DeviceIoControl DuplicateHandle EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FormatMessageW FreeEnvironmentStringsW GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSizeEx GetFileType GetFinalPathNameByHandleW GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetProcessId GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTimePreciseAsFileTime GetTempPathW GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection InitializeProcThreadAttributeList LeaveCriticalSection LockFileEx MapViewOfFile Module32FirstW Module32NextW MoveFileExW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReadFileEx RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetCurrentDirectoryW SetEnvironmentVariableW SetFileAttributesW SetFileInformationByHandle SetFilePointerEx SetFileTime SetHandleInformation SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnlockFile UnmapViewOfFile UpdateProcThreadAttribute VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFileEx __C_specific_handler lstrlenW

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _exit _fmode _fpreset _initterm _onexit abort calloc exit fprintf free fwrite malloc memcmp memcpy memmove memset signal strlen strncmp vfprintf

ntdll

NtCreateFile NtCreateNamedPipeFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

user32

MessageBoxW

userenv

GetUserProfileDirectoryW

ws2_32

GetHostNameW WSACleanup WSADuplicateSocketW WSAGetLastError WSARecv WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv recvfrom select send sendto setsockopt shutdown

Name

.text

Size

620KB

Virtual Size

619KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_208adbe2795c9c17e3e4c7d8ea5bb095_akira_cobalt-strike

api-ms-win-core-synch-l1-2-0

bcryptprimitives

advapi32

kernel32

msvcrt

ntdll

user32

userenv

ws2_32

generic