General
- Target 2026-08-10_7408e3af2241922c4650593eab19df0f_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- Sample260810-fa3jqav1cy
- SHA256 ab97cc37a1bc7e16923f4037332811ae35997959d2f38806ba5a8dbe9ae8df2f
- MD5 7408e3af2241922c4650593eab19df0f
- SHA1 5e2aade6f13979ca699f4a2bf7ff60dc05c831bd
- SHA512 5ed01fe62a1791c474867d80a5642fd9859876fd0bd5cd132449cfc508009eb803ed2909d01303cec4fefed186e310a700b58ae5f287a0d1d46ef79d414590aa
- SSDEEP 49152:K+/PivcpfQvdaKYXf3C0eyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN755Bl:b/PvOIjcXvvOOc5Fl2/V0cETQ/I
- TLSH T1FE165A1E735885E9D5A6D1BD8A42C506E271F801C73266CF26A4875E2FFB7E34E3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_7408e3af2241922c4650593eab19df0f_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_7408e3af2241922c4650593eab19df0f_akira_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- SHA256 ab97cc37a1bc7e16923f4037332811ae35997959d2f38806ba5a8dbe9ae8df2f
- MD5 7408e3af2241922c4650593eab19df0f
- SHA1 5e2aade6f13979ca699f4a2bf7ff60dc05c831bd
- SHA512 5ed01fe62a1791c474867d80a5642fd9859876fd0bd5cd132449cfc508009eb803ed2909d01303cec4fefed186e310a700b58ae5f287a0d1d46ef79d414590aa
- SSDEEP 49152:K+/PivcpfQvdaKYXf3C0eyjc4t2vLemGa2pcPVx7EhI2AM7/0XOMJU1QqpN755Bl:b/PvOIjcXvvOOc5Fl2/V0cETQ/I
- TLSH T1FE165A1E735885E9D5A6D1BD8A42C506E271F801C73266CF26A4875E2FFB7E34E3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory