2026-08-08_60affd5cf157c4336f2ecd510feab90c_akira_cobalt-strike

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_60affd5cf157c4336f2ecd510feab90c_akira_cobalt-strike
Size 266KB
Sample260808-d2v8lsyhnd
SHA256 a69e237a07d4bf2e12324b6fecb0709be8a083c114a4f8ba9d85f9fc834e3c69
MD5 60affd5cf157c4336f2ecd510feab90c
SHA1 f16b9951b7b3293f63b86d046a58c44f3456130a
SHA512 7c1f4ca3ff105a768f3a9ad6d9c27201ae15f4e4f77f4ca37a34cd7e5b247413c8e35b150cf0f30dfc927fb5b5827be054933ffd78de8d3ca144ade6d1214b47
SSDEEP 3072:HX0enwIhfUF3O3Fi3sH9o1H0AV30azwhophL6XRk7yP9e2xHxOqlbOehs+bfsDG+:HX0enwIQe3w++1UAVnp8XRk7aeif4j2
TLSH
T16B447B17F6A165BCE15AC038935AD973B632BCCA02207DBF12E496303F5AD515F2CB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_60affd5cf157c4336f2ecd510feab90c_akira_cobalt-strike

File Explorer

2026-08-08_60affd5cf157c4336f2ecd510feab90c_akira_cobalt-strike

.exe 266KB

2026-08-08_60affd5cf157c4336f2ecd510feab90c_akira_cobalt-strike

IMPHASH cdf7bd68bde042f2fe26c20125fa2490
SHA256 a69e237a07d4bf2e12324b6fecb0709be8a083c114a4f8ba9d85f9fc834e3c69
MD5 60affd5cf157c4336f2ecd510feab90c
SHA1 f16b9951b7b3293f63b86d046a58c44f3456130a
SHA512 7c1f4ca3ff105a768f3a9ad6d9c27201ae15f4e4f77f4ca37a34cd7e5b247413c8e35b150cf0f30dfc927fb5b5827be054933ffd78de8d3ca144ade6d1214b47
SSDEEP 3072:HX0enwIhfUF3O3Fi3sH9o1H0AV30azwhophL6XRk7yP9e2xHxOqlbOehs+bfsDG+:HX0enwIQe3w++1UAVnp8XRk7aeif4j2
TLSH
T16B447B17F6A165BCE15AC038935AD973B632BCCA02207DBF12E496303F5AD515F2CB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CreateFileMappingA CreateFileW CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileW DuplicateHandle EnterCriticalSection FlushInstructionCache FormatMessageW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetSystemTimeAsFileTime GetTempPathW GetTickCount HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection LeaveCriticalSection LoadLibraryA MapViewOfFile Module32FirstW Module32NextW MoveFileExW MultiByteToWideChar OpenFileMappingW QueryPerformanceCounter RaiseException RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetFileInformationByHandle SetFileTime SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualProtect VirtualQuery WaitForSingleObject WriteConsoleW __C_specific_handler

msvcrt

__getmainargs __initenv __iob_func __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _fmode _fpreset _initterm _onexit abort calloc exit fprintf free fwrite malloc memcmp memcpy memmove memset signal strlen strncmp vfprintf

ntdll

NtWriteFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

Name

.text

Size

208KB

Virtual Size

208KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

696B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.isynch

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_60affd5cf157c4336f2ecd510feab90c_akira_cobalt-strike

kernel32

msvcrt

ntdll

api-ms-win-core-synch-l1-2-0

generic