2026-08-10_c36e6cacd01f977d0f3e1abd10691cea_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_c36e6cacd01f977d0f3e1abd10691cea_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
Size 3.7MB
Sample260810-3jdchsbb95
SHA256 4e5d621922379b984c526b37829a75edec6660fe095c2bf4f5706c4bebaae335
MD5 c36e6cacd01f977d0f3e1abd10691cea
SHA1 d68604d13377f8249e1070bd3cdee9070a3e2933
SHA512 6ff7db64ee0848c00414e378662d7f60923ac508f4921069fb1e04787f0497d7af31fa34f44cf70470a6c816c017aa8ea187d69fe4ecc1f0c83818ebd6fc3088
SSDEEP 49152:HIbvKPkz+jy//XJllqk8PA0KfEslHyNkJmzQPm6YgA0uG:KLlqCZTJo6YgAn
TLSH
T1FF06AE1277A882A4E2FA9178D416DA59D630BC990334A1C765F43A7B7F3BBD18D3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_c36e6cacd01f977d0f3e1abd10691cea_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

File Explorer

2026-08-10_c36e6cacd01f977d0f3e1abd10691cea_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

.exe 3.7MB

2026-08-10_c36e6cacd01f977d0f3e1abd10691cea_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

IMPHASH 4050dcef5d33f9f22f2059bb2add2773
SHA256 4e5d621922379b984c526b37829a75edec6660fe095c2bf4f5706c4bebaae335
MD5 c36e6cacd01f977d0f3e1abd10691cea
SHA1 d68604d13377f8249e1070bd3cdee9070a3e2933
SHA512 6ff7db64ee0848c00414e378662d7f60923ac508f4921069fb1e04787f0497d7af31fa34f44cf70470a6c816c017aa8ea187d69fe4ecc1f0c83818ebd6fc3088
SSDEEP 49152:HIbvKPkz+jy//XJllqk8PA0KfEslHyNkJmzQPm6YgA0uG:KLlqCZTJo6YgAn
TLSH
T1FF06AE1277A882A4E2FA9178D416DA59D630BC990334A1C765F43A7B7F3BBD18D3E310
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1002844

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\jws\workspace\iCUE_Installers_v1.12\build\out\Install iCUE.pdb

dwmapi

DwmExtendFrameIntoClientArea

msi

ord205

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetEnvironmentVariableW GetCommandLineA GetStdHandle

api-ms-win-core-file-l1-1-0

GetFileType GetFileTime RemoveDirectoryW GetFileSizeEx SetFilePointer WriteFile CreateFileW FindClose FlushFileBuffers FindFirstFileExW FindNextFileW GetFileAttributesW GetFileAttributesExW CreateDirectoryW GetFullPathNameW ReadFile SetFileTime SetFilePointerEx SetFileInformationByHandle SetFileAttributesW DeleteFileW SetEndOfFile

api-ms-win-core-handle-l1-1-0

SetHandleInformation CloseHandle

api-ms-win-core-errorhandling-l1-1-0

RaiseException GetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter SetLastError

api-ms-win-core-namedpipe-l1-1-0

PeekNamedPipe CreatePipe

api-ms-win-core-processthreads-l1-1-0

ExitProcess GetExitCodeProcess GetStartupInfoW GetCurrentProcess TerminateProcess GetCurrentProcessId CreateProcessW TlsAlloc TlsGetValue TlsSetValue TlsFree SwitchToThread GetCurrentThreadId

api-ms-win-core-registry-l1-1-0

RegGetValueW RegSetValueExA RegOpenKeyExW RegCreateKeyExA RegCloseKey

api-ms-win-core-console-l1-1-0

GetConsoleMode ReadConsoleW WriteConsoleW GetConsoleOutputCP

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-synch-l1-1-0

WaitForSingleObject ReleaseMutex ResetEvent DeleteCriticalSection InitializeCriticalSectionEx CreateMutexW SetEvent CreateEventW TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock WaitForSingleObjectEx InitializeCriticalSectionAndSpinCount

api-ms-win-core-libraryloader-l1-2-0

SizeofResource LoadLibraryExW FreeLibrary GetModuleHandleExW GetProcAddress GetModuleFileNameW LoadResource GetModuleHandleW LockResource

api-ms-win-core-libraryloader-l1-2-1

FindResourceW LoadLibraryW

api-ms-win-core-com-l1-1-0

CoUninitialize CoTaskMemAlloc CoInitializeEx CoGetObjectContext CoCreateInstance CoCreateFreeThreadedMarshaler CoGetApartmentType CoTaskMemFree

oleaut32

SysStringLen SysAllocString GetErrorInfo SetErrorInfo VariantClear VariantInit SysFreeString

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics

user32

PostQuitMessage GetWindowLongPtrW SetWindowLongPtrW LoadCursorW GetMessageW GetDpiForWindow TranslateMessage DispatchMessageW PostMessageW DefWindowProcW RegisterClassExW CreateWindowExW DestroyWindow ShowWindow ScreenToClient SetLayeredWindowAttributes SetWindowPos UpdateWindow GetWindowRect MessageBoxW TrackMouseEvent

gdi32

GetStockObject

shell32

ShellExecuteW SHGetKnownFolderPath

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader RtlCaptureContext RtlLookupFunctionEntry RtlUnwind RtlVirtualUnwind RtlUnwindEx

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-synch-l1-2-0

Sleep InitOnceBeginInitialize InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW SleepConditionVariableCS InitOnceComplete

api-ms-win-core-localization-l1-2-0

LCMapStringEx IsValidLocale GetACP IsValidCodePage GetCPInfo GetOEMCP LCMapStringW GetUserDefaultLCID FormatMessageA EnumSystemLocalesW GetLocaleInfoEx FormatMessageW GetLocaleInfoW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar GetStringTypeW WideCharToMultiByte CompareStringW CompareStringEx

api-ms-win-core-file-l1-2-2

AreFileApisANSI

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork CloseThreadpoolWait CloseThreadpoolTimer TrySubmitThreadpoolCallback CreateThreadpoolWait SetThreadpoolWait SetThreadpoolTimer CreateThreadpoolTimer FreeLibraryWhenCallbackReturns CreateThreadpoolWork CloseThreadpoolWork

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime GetSystemTimeAsFileTime

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent OutputDebugStringW

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList InitializeSListHead

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime GetTimeZoneInformation

api-ms-win-core-heap-l1-1-0

HeapReAlloc HeapSize HeapAlloc HeapFree GetProcessHeap

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW GetDateFormatW

api-ms-win-security-cryptoapi-l1-1-0

CryptSetKeyParam CryptReleaseContext CryptGetHashParam CryptGenRandom CryptImportKey CryptEncrypt CryptDestroyHash CryptHashData CryptDestroyKey CryptAcquireContextA CryptCreateHash CryptSetHashParam

crypt32

CryptVerifyMessageSignature CertFreeCertificateContext CertGetCertificateChain CertFreeCertificateChain CertVerifyCertificateChainPolicy

advapi32

CryptDuplicateHash

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

402KB

Virtual Size

401KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

160KB

Virtual Size

174KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

65KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

576KB

Virtual Size

580KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_c36e6cacd01f977d0f3e1abd10691cea_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar

dwmapi

msi

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-namedpipe-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-console-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-com-l1-1-0

oleaut32

api-ms-win-core-heap-l2-1-0

api-ms-win-shcore-obsolete-l1-1-0

api-ms-win-ntuser-sysparams-l1-1-0

user32

gdi32

shell32

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-file-l1-2-2

api-ms-win-core-file-l2-1-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-datetime-l1-1-0

api-ms-win-security-cryptoapi-l1-1-0

crypt32

advapi32

generic