Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/08/2026, 22:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
- Size 18.9MB
- Sample260806-2ffssssakd
- SHA256 fa1ddf75e3795e1f1a04708b549b7c853d087ff7a62baadb4c3a78ff9e37f303
- MD5 dc8ca139ef5739d612a311ab3e677bda
- SHA1 34b936ac01c9345910cc45008bbd69aa699d2f48
- SHA512 d837b5a4f104a7b4b21dfc558c9a142516a599c29947192cee73e31c6d603382635faaaa3afda46c4d3dc928b905edc46d5e1dd7b5a4d61c63521d03c8dc512b
- SSDEEP 196608:8EUlKfqbJeRhb5E7cRGo8sOgZo0aHqaEttjezQw5yCBvo4po3K9tz6ZHkDKWKRUd:MwibJejRaEtAzlw4p4c6H4nKRN/+58Lo
- TLSH T11717BE02BA9A59EAD19DC870C3474B678F2274CB0636F5BF46C402292F6E7B51F2D316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3592 2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3592 2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:3592
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar3592_debug_log.txt
- Path C:\ProgramData\Dell\UpdatePackage\log\support\2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar3592_debug_log.txt
- Size 3KB
- SHA256 4c9f4557aeabe90958dd2b2620bce6cedef6a3607e8b5e27b2abb263dd5764c5
- MD5 2c304b0b030145627b52e4c30ab50e28
- SHA1 8862b839134e92db678dc04b904dcf0ef7870a56
- SHA512 25834b6a83ff65872818ca47aeb0a4911c3eede196a21b75a272e9571cc30c584058c3c73defe5398204a3adba0f0aca05a5aab3b5f0fc4d85d85cb7e930924c
- TLSH T1D16155021EFBE27B3697E609A698DC6C22023E29D6098C36FB5C40C617517AD25FFC5C
- MD5 SHA1 SHA512 TLSH
2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar3592_debug_log.txt
- Path C:\ProgramData\Dell\UpdatePackage\log\support\2026-08-06_dc8ca139ef5739d612a311ab3e677bda_akira_cobalt-strike_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar3592_debug_log.txt
- Size 1KB
- SHA256 3eb30f7e509d3b79f5b5cda1880160da98c13ff8e56276d1c818a11c1472600f
- MD5 d67560ab8f0b02cea3b41ae5d8db02ef
- SHA1 e25b4f63f9a056b59bb07be0f9c1195c37d1315c
- SHA512 aac44857d124251304cfcb600345b050f9c04724cc03adc0c78cff9dfaaa7f9e5d1b2d4124c7417b381a450b806351d45f7acf87e9327f968a848c6692275949
- TLSH T185419C011EFAA33B3A67E6495A18AC5D22023D2CD605CC36FB4C05C617507AD26FFC5C
- MD5 SHA1 SHA512 TLSH