General
- Target 2026-08-05_4cc2e117bdc9265900328f82844eb3af_akira_cobalt-strike_icedid_rusty-stealer
- Size 822KB
- Sample260805-pc65cs1wgv
- SHA256 b8fd1d1dea8f66e5b7a3910b1ae30986b989c1ad2f3c58fa86584e1dac0b4de1
- MD5 4cc2e117bdc9265900328f82844eb3af
- SHA1 3313d0f54853b1beb466a724a4a381dc96401492
- SHA512 8f88d084558524726863a52fd606b8612daae12281002deed9a30e98ce39c029e5b584df4cfa82f01158194cb5d8c40cd8404629baeb31053e3c65406c99c2df
- SSDEEP 12288:tnVla1hTsQAmU4R2NuwPRVDasaVNXkvxf1sle3v4ahf61iL6Ygy9EwhHgoPtA:+XSrVmjH05fxPLuyWwHgoS
- TLSH T12D05D011FA8984F8D0578439C352A5A3AB71FC960F0169EF019C743D2F7ABE91E39366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_4cc2e117bdc9265900328f82844eb3af_akira_cobalt-strike_icedid_rusty-stealer.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_4cc2e117bdc9265900328f82844eb3af_akira_cobalt-strike_icedid_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_4cc2e117bdc9265900328f82844eb3af_akira_cobalt-strike_icedid_rusty-stealer
- Size 822KB
- SHA256 b8fd1d1dea8f66e5b7a3910b1ae30986b989c1ad2f3c58fa86584e1dac0b4de1
- MD5 4cc2e117bdc9265900328f82844eb3af
- SHA1 3313d0f54853b1beb466a724a4a381dc96401492
- SHA512 8f88d084558524726863a52fd606b8612daae12281002deed9a30e98ce39c029e5b584df4cfa82f01158194cb5d8c40cd8404629baeb31053e3c65406c99c2df
- SSDEEP 12288:tnVla1hTsQAmU4R2NuwPRVDasaVNXkvxf1sle3v4ahf61iL6Ygy9EwhHgoPtA:+XSrVmjH05fxPLuyWwHgoS
- TLSH T12D05D011FA8984F8D0578439C352A5A3AB71FC960F0169EF019C743D2F7ABE91E39366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox DLL files
-
Looks for VirtualBox drivers on disk
-
Looks for VirtualBox executables on disk
-
Looks for VMWare drivers on disk
-
Suspicious use of NtSetInformationThreadHideFromDebugger