General
- Target 2026-08-07_5ea0102debb8351f0e20898b6f1d3da8_akira_cobalt-strike_elex_icedid_swisyn
- Size 417KB
- Sample260807-3vkwqsdr2s
- SHA256 40dc2741b7c11ca56adb541a05d642ac1e4989a5a8ddfc012768cbb557c7eee1
- MD5 5ea0102debb8351f0e20898b6f1d3da8
- SHA1 a7af92933aaa24d3218d43fcde1745e17d4a8d84
- SHA512 ae0602497d950ca548f2bf3dcd4bba3f9949f0ba4aaf7ea90b8862c81c157f9bf238a750caae1f43243b6c252cd776c6f37b4545c55a0a88f662fb2b407a647b
- SSDEEP 6144:XsLqdufVUNDa135FSOoQIJiuvicFx8YMYQJn6aOi702FH:cFUNDaRWdHbH8YAZ66I2t
- TLSH T16A948D26B64008FDDC27C0B992558A26BA327C960B60EEDF13A057252E737D37F78716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_5ea0102debb8351f0e20898b6f1d3da8_akira_cobalt-strike_elex_icedid_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_5ea0102debb8351f0e20898b6f1d3da8_akira_cobalt-strike_elex_icedid_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_5ea0102debb8351f0e20898b6f1d3da8_akira_cobalt-strike_elex_icedid_swisyn
- Size 417KB
- SHA256 40dc2741b7c11ca56adb541a05d642ac1e4989a5a8ddfc012768cbb557c7eee1
- MD5 5ea0102debb8351f0e20898b6f1d3da8
- SHA1 a7af92933aaa24d3218d43fcde1745e17d4a8d84
- SHA512 ae0602497d950ca548f2bf3dcd4bba3f9949f0ba4aaf7ea90b8862c81c157f9bf238a750caae1f43243b6c252cd776c6f37b4545c55a0a88f662fb2b407a647b
- SSDEEP 6144:XsLqdufVUNDa135FSOoQIJiuvicFx8YMYQJn6aOi702FH:cFUNDaRWdHbH8YAZ66I2t
- TLSH T16A948D26B64008FDDC27C0B992558A26BA327C960B60EEDF13A057252E737D37F78716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory