Analysis
- max time kernel
149s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
06/08/2026, 22:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
- Size 18.9MB
- Sample260806-2ffssssakd
- SHA256 fa1ddf75e3795e1f1a04708b549b7c853d087ff7a62baadb4c3a78ff9e37f303
- MD5 dc8ca139ef5739d612a311ab3e677bda
- SHA1 34b936ac01c9345910cc45008bbd69aa699d2f48
- SHA512 d837b5a4f104a7b4b21dfc558c9a142516a599c29947192cee73e31c6d603382635faaaa3afda46c4d3dc928b905edc46d5e1dd7b5a4d61c63521d03c8dc512b
- SSDEEP 196608:8EUlKfqbJeRhb5E7cRGo8sOgZo0aHqaEttjezQw5yCBvo4po3K9tz6ZHkDKWKRUd:MwibJejRaEtAzlw4p4c6H4nKRN/+58Lo
- TLSH T11717BE02BA9A59EAD19DC870C3474B678F2274CB0636F5BF46C402292F6E7B51F2D316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4676 2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4676 2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:4676
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar4676_debug_log.txt
- Path C:\ProgramData\Dell\UpdatePackage\log\support\2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar4676_debug_log.txt
- Size 2KB
- SHA256 2cfb20becdd697a5938262124a99d5efdb2bb57c13a36b5b90ac40529054c3dc
- MD5 02d94cf551fc9cd4b896345a1034636b
- SHA1 dfe93ea41f87400c2d46216ac5a923b19188db24
- SHA512 b98ef3f6c60609a4caec04d552341dabdb5215ed1199e4e8dc0f97f7a5acf8310fcdb851d04203dc394317807c1be79e981980cabca62207f02a7250a685c7a3
- TLSH T1445156000EFFE27A2EA3DA4D9688FC6952123E1D9A048C26FBDD41D51B9078D25F7C9D
- MD5 SHA1 SHA512 TLSH
2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar4676_debug_log.txt
- Path C:\ProgramData\Dell\UpdatePackage\log\support\2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar4676_debug_log.txt
- Size 1KB
- SHA256 a3f85a44ce342200ea2f3591d699c251398904e0f7bee105625827918cad8c52
- MD5 935d2500e85376dd592cfe4798a7495d
- SHA1 0e97c515c061a4017009ca7a89dd154693a5ea8c
- SHA512 92aa50375a2ceccb6c8fb4266daa5c4db6090f1bde16fe6dc673ce5b03ad2e5a27c6f8d9661fa3d9d92a6a87106e015d9062d44f756babe39298fcb83d773f23
- TLSH T1283105011DEFA23EAE67CA884648BC5562127E6C86008C33FBDC42C21790B4C26F7D9D
- MD5 SHA1 SHA512 TLSH