2026-08-03_8e8d50f472fd3c721238c09f0eb04acd_akira_cobalt-strike

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_8e8d50f472fd3c721238c09f0eb04acd_akira_cobalt-strike
Size 919KB
Sample260804-mx3assdj2y
SHA256 d3e2b0e7ff4ea385ed9ce9f65fec30ec68857ef967edfa7f96031d066b1b1302
MD5 8e8d50f472fd3c721238c09f0eb04acd
SHA1 10dec58ca4b1dd3ef47cc9fd76fde45e2e377240
SHA512 dbdcb4d8423304b6de6ae7da574fe3b23889e22b5bc6c420f79d5a361b5ccf312193a461f1a8bcc2b0a7c6f97f1326cb54f1f680890e70ef89fd0767e2a79b81
SSDEEP 6144:kMMSkGyu91kfjPme/x+UCG1TWv4CTPuNUCswAWHN6ARTs3oWmSkvciMLe0vKyLYd:Tyu9iIUCBR7uKvq6ALSkZv0Z0XXT
TLSH
T124155C5B765518BED513C0398276E136BA35BD8226327B7B2ADC9E377F45AC04F0A308
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_8e8d50f472fd3c721238c09f0eb04acd_akira_cobalt-strike

File Explorer

2026-08-03_8e8d50f472fd3c721238c09f0eb04acd_akira_cobalt-strike

.exe 919KB

2026-08-03_8e8d50f472fd3c721238c09f0eb04acd_akira_cobalt-strike

IMPHASH 3163a693193107a51f7e3b5d634af4e7
SHA256 d3e2b0e7ff4ea385ed9ce9f65fec30ec68857ef967edfa7f96031d066b1b1302
MD5 8e8d50f472fd3c721238c09f0eb04acd
SHA1 10dec58ca4b1dd3ef47cc9fd76fde45e2e377240
SHA512 dbdcb4d8423304b6de6ae7da574fe3b23889e22b5bc6c420f79d5a361b5ccf312193a461f1a8bcc2b0a7c6f97f1326cb54f1f680890e70ef89fd0767e2a79b81
SSDEEP 6144:kMMSkGyu91kfjPme/x+UCG1TWv4CTPuNUCswAWHN6ARTs3oWmSkvciMLe0vKyLYd:Tyu9iIUCBR7uKvq6ALSkZv0Z0XXT
TLSH
T124155C5B765518BED513C0398276E136BA35BD8226327B7B2ADC9E377F45AC04F0A308
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

CancelIoEx CloseHandle CreateFileMappingA CreateFileW CreateIoCompletionPort CreateThread CreateWaitableTimerExW DisconnectNamedPipe DuplicateHandle FormatMessageW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentThread GetCurrentThreadId GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetQueuedCompletionStatusEx GetStdHandle GetSystemInfo HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete MapViewOfFile PostQueuedCompletionStatus ReadFile RtlLookupFunctionEntry SetLastError SetThreadStackGuarantee SetWaitableTimer Sleep SwitchToThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile WaitForSingleObject WriteConsoleW WriteFile AddVectoredExceptionHandler CreateToolhelp32Snapshot GetCommandLineW GetCurrentDirectoryW GetEnvironmentVariableW Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RtlCaptureContext RtlVirtualUnwind SetUnhandledExceptionFilter DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler

ntdll

NtCancelIoFileEx NtDeviceIoControlFile NtWriteFile RtlNtStatusToDosError

libgio-2.0-0

g_application_run

libglib-2.0-0

g_free g_log g_main_context_acquire g_main_context_invoke_full g_main_context_ref g_main_context_ref_thread_default g_main_context_release g_main_context_unref g_malloc g_source_attach g_source_get_context g_source_is_destroyed g_source_new g_source_set_priority g_source_set_ready_time g_source_unref g_string_append_len g_string_free g_string_new

libgobject-2.0-0

g_object_ref_sink g_object_unref g_signal_connect_data g_signal_handler_disconnect g_type_is_a g_weak_ref_clear g_weak_ref_get g_weak_ref_init

libgtk-3-0

gtk_application_new gtk_application_window_get_type gtk_builder_get_object gtk_builder_new_from_string gtk_button_get_type gtk_entry_get_text gtk_entry_get_type gtk_entry_set_text gtk_label_get_type gtk_message_dialog_new gtk_widget_hide gtk_widget_show gtk_widget_show_all gtk_window_close gtk_window_set_application

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fmode _fpreset _initterm _onexit abort calloc exit fprintf free fwrite malloc memcmp memcpy memmove memset pow signal strlen strncmp vfprintf

Name

.text

Size

502KB

Virtual Size

502KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

70KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_8e8d50f472fd3c721238c09f0eb04acd_akira_cobalt-strike

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

libgio-2.0-0

libglib-2.0-0

libgobject-2.0-0

libgtk-3-0

msvcrt

generic