Analysis
- max time kernel
149s - max time network
135s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 14:06
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_853a51f1a69b7b94e1c0fbfc627b1226_akira_cobalt-strike_glassworm_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_853a51f1a69b7b94e1c0fbfc627b1226_akira_cobalt-strike_glassworm_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-09_853a51f1a69b7b94e1c0fbfc627b1226_akira_cobalt-strike_glassworm_icedid_njrat_stealc_vidar.exe
- Size 4.0MB
- Sample260809-renrxasvbz
- SHA256 41c83563474ee1d51f35cff6e7ca9ffb9b6d65a50b6575b9d0c09dba3dd2c7fa
- MD5 853a51f1a69b7b94e1c0fbfc627b1226
- SHA1 aad13c7f79aa4cb1292a1067298051830d97dbf5
- SHA512 2d7da49af516bebdd8de6342d847fb11141157d88bf3ca0e65285a84ee78c8618c0ddedc55c26a6ea743b0035942d40472e02239a052515556fee0be95e816e9
- SSDEEP 49152:D+/PivcpfQvdaKYXf3Cvyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN755vic:y/PvO8jcXvvOOc5MRV
- TLSH T166165C2E6B9885E8D166D1BD4A42C506F371F801C73156DF22A4875E2FBBBE34E3A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables packed with VMProtect. 2 IoCs
resource yara_rule behavioral1/memory/1376-0-0x0000000140000000-0x0000000140561000-memory.dmp INDICATOR_EXE_Packed_VMProtect behavioral1/memory/1376-1-0x0000000140000000-0x0000000140561000-memory.dmp INDICATOR_EXE_Packed_VMProtect