General
- Target 2026-08-07_583bf7ad93e9077ba2762995d6330293_akira_cobalt-strike_icedid_njrat_vidar
- Size 3.4MB
- Sample260807-ym2gasseqf
- SHA256 765c24f95f7dde3278290b2908f25b766400e41a1800cbb3b7841e46f3ec1b00
- MD5 583bf7ad93e9077ba2762995d6330293
- SHA1 218cee3557b541a88f31111b34067281b64f6982
- SHA512 e07c763053bdf25747da5d5401751d8678bb61e3cec41d8a03949337ef0629051b2b0b0e4160826940baaf7e9c727a9ce838560cabdf0367cc8d2ad779dc0e71
- SSDEEP 49152:5rwFqmF0py/REPgsruUmmQTclDNzaGFSux8xaKAweIHDkJMbd3rtgiomvJi:9ZmFPZTKueQgltd6xjNi
- TLSH T1E4F59E5B72A901F8E177D17CCA475B06E6B274064731ABCF12A487AA1F27BE05E7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_583bf7ad93e9077ba2762995d6330293_akira_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_583bf7ad93e9077ba2762995d6330293_akira_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_583bf7ad93e9077ba2762995d6330293_akira_cobalt-strike_icedid_njrat_vidar
- Size 3.4MB
- SHA256 765c24f95f7dde3278290b2908f25b766400e41a1800cbb3b7841e46f3ec1b00
- MD5 583bf7ad93e9077ba2762995d6330293
- SHA1 218cee3557b541a88f31111b34067281b64f6982
- SHA512 e07c763053bdf25747da5d5401751d8678bb61e3cec41d8a03949337ef0629051b2b0b0e4160826940baaf7e9c727a9ce838560cabdf0367cc8d2ad779dc0e71
- SSDEEP 49152:5rwFqmF0py/REPgsruUmmQTclDNzaGFSux8xaKAweIHDkJMbd3rtgiomvJi:9ZmFPZTKueQgltd6xjNi
- TLSH T1E4F59E5B72A901F8E177D17CCA475B06E6B274064731ABCF12A487AA1F27BE05E7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Drops file in System32 directory