Analysis
- max time kernel
148s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/08/2026, 01:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
- Size 4.2MB
- Sample260806-bpph7azhpd
- SHA256 3ed6c89fa8784acdd68d31cfc86dc231232794d20c805ea7ec91e6ec6237e61e
- MD5 a5838982fbb209788d7a8ac60c762d3b
- SHA1 46c4abc248f9e2895057e3ab8195bd85b80a34f3
- SHA512 0d03423f6b285e62470a9c199710f0c0c80e954645b6539356d250a641dcbbd5f31af956599d9d9083c57b93f2a5723b3bd6f05f8c276b7a667ad3973ad1415e
- SSDEEP 49152:4YbO8UnucBvKZfARv7da8ckZmgtRpnGsxdoGqmS14nmc47l2:jCH7UfS9dhpGDmLyl2
- TLSH T11F26E70153FE42DAF1FB9F70E9755622DA72BC626B3DC29F025094290E367A1CD74B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe - Suspicious use of AdjustPrivilegeToken 16 IoCs
description pid Process Token: SeBackupPrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeRestorePrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeSecurityPrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeTakeOwnershipPrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeDebugPrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeTakeOwnershipPrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeRestorePrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeSecurityPrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeTakeOwnershipPrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeRestorePrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeSecurityPrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeBackupPrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: 33 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeIncBasePriorityPrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: 33 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe Token: SeIncBasePriorityPrivilege 2216 2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-06_a5838982fbb209788d7a8ac60c762d3b_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:2216
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Settings\inifile.ini
- Size 97B
- SHA256 da41288472ea413aaeeb6e51de6b0ab3ff1a11212d2556bda9dc0aa79bd87531
- MD5 8211ddccf900e01521ca6dfe5dc87c61
- SHA1 b929175bcc15f5bfc5aafdb2a06c3c74ae8c9918
- SHA512 a734e4423600917b4602e609560cc5de5a879c312484ff4b68fa37357b4c312e43f69160a5b8f7e4927bd9b35e053a90324c732b8b0a2418a860bb95776c1045
- TLSH T165B012200A45020D6C74808415D04FD0003EDEB20513D431DB135C616619845819D454
- MD5 SHA1 SHA512 TLSH