General
- Target 2026-08-12_6593b91022117c8cd3760ee6962e16fa_akira_cobalt-strike_icedid_njrat_vidar
- Size 3.3MB
- Sample260812-e662cavzgv
- SHA256 069d2bc3c0c6b2839dcf56dae723b752dd336c9ffa4b21ea224e9e41212e11e5
- MD5 6593b91022117c8cd3760ee6962e16fa
- SHA1 fdd9c113cbbb1567443443022bf6a9e4fbf24d86
- SHA512 de6dc277c436501b42382dfae06d8636d25f9a2d41a1f749544ba6b7a56099a79493389bd1b8c53a8e281cfb32c93f3a5ae712ffa792ffe67615ae686b4f3326
- SSDEEP 49152:vZoxiDUPH7VWDDJh5J8bUJnzsGF8F60srxqgZcip7wRz32k5EiL6BE8mSkdkTx7s:vIWDDJhsKVEw7Nw
- TLSH T14CF5BE5AA2A701ECC0BB90BCCA699647F774341A03905FF716E4C6652F17BE41B3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_6593b91022117c8cd3760ee6962e16fa_akira_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_6593b91022117c8cd3760ee6962e16fa_akira_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_6593b91022117c8cd3760ee6962e16fa_akira_cobalt-strike_icedid_njrat_vidar
- Size 3.3MB
- SHA256 069d2bc3c0c6b2839dcf56dae723b752dd336c9ffa4b21ea224e9e41212e11e5
- MD5 6593b91022117c8cd3760ee6962e16fa
- SHA1 fdd9c113cbbb1567443443022bf6a9e4fbf24d86
- SHA512 de6dc277c436501b42382dfae06d8636d25f9a2d41a1f749544ba6b7a56099a79493389bd1b8c53a8e281cfb32c93f3a5ae712ffa792ffe67615ae686b4f3326
- SSDEEP 49152:vZoxiDUPH7VWDDJh5J8bUJnzsGF8F60srxqgZcip7wRz32k5EiL6BE8mSkdkTx7s:vIWDDJhsKVEw7Nw
- TLSH T14CF5BE5AA2A701ECC0BB90BCCA699647F774341A03905FF716E4C6652F17BE41B3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.