General
- Target 2026-08-08_139440b78d882c38be598196e146f9ed_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- Sample260808-frdlxshr71
- SHA256 91d364763b7c104cdc1bfa682ab3708270823f414c728d2f7f61278308af1c58
- MD5 139440b78d882c38be598196e146f9ed
- SHA1 59c005be6d3bad197b3f9f19f6632155298b9a10
- SHA512 d7f0da755d0b208d5ca1673285500d8175f36e44a1d38a6a177b01a500dc949a3ae03437c9b0cf186103c0295ec7bd9f0a08e7daf31e8321b4acc29f7d5f9c66
- SSDEEP 49152:T+/PivcpfQvdaKYXf3C0eyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN75576:i/PvOIjcXvvOOc5REnW6at
- TLSH T130165A1E735885E9D5A6D1BD8A428506F271F801C73266CF26A4875E2FFB7E34E3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_139440b78d882c38be598196e146f9ed_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_139440b78d882c38be598196e146f9ed_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- SHA256 91d364763b7c104cdc1bfa682ab3708270823f414c728d2f7f61278308af1c58
- MD5 139440b78d882c38be598196e146f9ed
- SHA1 59c005be6d3bad197b3f9f19f6632155298b9a10
- SHA512 d7f0da755d0b208d5ca1673285500d8175f36e44a1d38a6a177b01a500dc949a3ae03437c9b0cf186103c0295ec7bd9f0a08e7daf31e8321b4acc29f7d5f9c66
- SSDEEP 49152:T+/PivcpfQvdaKYXf3C0eyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN75576:i/PvOIjcXvvOOc5REnW6at
- TLSH T130165A1E735885E9D5A6D1BD8A428506F271F801C73266CF26A4875E2FFB7E34E3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory