2026-08-09_a93c4f8f7b4aa3f6d54b3a5b5ce8ab29_akira_cobalt-strike_glassworm_icedid_satacom_vidar

General

Target
2026-08-09_a93c4f8f7b4aa3f6d54b3a5b5ce8ab29_akira_cobalt-strike_glassworm_icedid_satacom_vidar
Size 362KB
Sample260809-tph1hs1fne
SHA256 ed3f5ba1a92a1c6b047b2e32e59bfcf7b67bfe36c8cdc219a79726763d3b5805
MD5 a93c4f8f7b4aa3f6d54b3a5b5ce8ab29
SHA1 3beb570e86f070ea5900aff6ba4e62b8ae9f2dd9
SHA512 fe5dea65e983c511e690c70ece1a3bffea761710296b8443172c3906d6aa4b2f0aef868fc765658fc9dfe2c2d50668cf46651b87bef6e43d87c1dac5497b1885
SSDEEP 6144:S7Ior9RNpdMgu/rBrzMfezZXjN4dzTSbxvaqmB+ne:xbFgSZzN0M1y
TLSH
T15A845B26FB451CFDD42AD03486464A6269327CCA0731BEFF22D461362F7AAE06E3D745
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-09_a93c4f8f7b4aa3f6d54b3a5b5ce8ab29_akira_cobalt-strike_glassworm_icedid_satacom_vidar

File Explorer

2026-08-09_a93c4f8f7b4aa3f6d54b3a5b5ce8ab29_akira_cobalt-strike_glassworm_icedid_satacom_vidar

.exe 362KB

2026-08-09_a93c4f8f7b4aa3f6d54b3a5b5ce8ab29_akira_cobalt-strike_glassworm_icedid_satacom_vidar

IMPHASH 8c7b8a24a346512928a131f66113fcaf
SHA256 ed3f5ba1a92a1c6b047b2e32e59bfcf7b67bfe36c8cdc219a79726763d3b5805
MD5 a93c4f8f7b4aa3f6d54b3a5b5ce8ab29
SHA1 3beb570e86f070ea5900aff6ba4e62b8ae9f2dd9
SHA512 fe5dea65e983c511e690c70ece1a3bffea761710296b8443172c3906d6aa4b2f0aef868fc765658fc9dfe2c2d50668cf46651b87bef6e43d87c1dac5497b1885
SSDEEP 6144:S7Ior9RNpdMgu/rBrzMfezZXjN4dzTSbxvaqmB+ne:xbFgSZzN0M1y
TLSH
T15A845B26FB451CFDD42AD03486464A6269327CCA0731BEFF22D461362F7AAE06E3D745
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

9d:6c:43:86:cf:27:60:19:b3:4d:a7:c3:77:51:78:37:d4:b4:fa:6a

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=APTX Software

Chains

Nov 16, 2022

CN=APTX Software

Minor OS version

0

Major OS version

6

Entry point

197484

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

SystemFunction036

bcrypt

BCryptGenRandom BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider

crypt32

CryptUnprotectData

kernel32

SetFilePointerEx CloseHandle GetProcessHeap HeapAlloc GetCommandLineW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime SystemTimeToFileTime GetTimeZoneInformation AddVectoredExceptionHandler SetThreadStackGuarantee GetLastError HeapFree HeapReAlloc GetModuleHandleA GetProcAddress GetCurrentThread TryAcquireSRWLockExclusive ReleaseSRWLockExclusive GetStdHandle GetConsoleMode WaitForSingleObject WriteConsoleW SetLastError WaitForSingleObjectEx LoadLibraryA CreateMutexA GetCurrentProcess ReleaseMutex GetEnvironmentVariableW RtlLookupFunctionEntry GetModuleHandleW FormatMessageW GetModuleFileNameW CreateFileW GetFullPathNameW AcquireSRWLockExclusive GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle CreateThread GetCurrentProcessId CreateNamedPipeW ReadFileEx SleepEx WriteFileEx GetSystemTimeAsFileTime GetCurrentDirectoryW RtlCaptureContext AcquireSRWLockShared ReleaseSRWLockShared GetConsoleOutputCP QueryPerformanceCounter GetCurrentThreadId InitializeSListHead RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent RtlUnwindEx EncodePointer RaiseException EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RtlPcToFileHeader WriteFile ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW HeapSize FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_a93c4f8f7b4aa3f6d54b3a5b5ce8ab29_akira_cobalt-strike_glassworm_icedid_satacom_vidar

PE Signature issue

advapi32

bcrypt

crypt32

kernel32

generic