General
- Target 2026-08-12_7fd5e55b16545e3d6d2091216603ebd4_akira_cobalt-strike_glassworm_icedid_mespinoza_njrat_ryuk_stealc_vidar
- Size 5.8MB
- Sample260813-a54glsycjb
- SHA256 22940e96d6505701c70d56b6f9370b7c8b3a333789a7c080eb753eec66a76808
- MD5 7fd5e55b16545e3d6d2091216603ebd4
- SHA1 3b451688a3721d0e6ce39b3a0e93b205dffb838e
- SHA512 85a756247887649b2ce423b98e5ae1605d024b4d312272c32602b7c9a7bb447729e9210b10287e2fd3771b81e97525492e7a5e1be19ad8c6ce0fa49f3f47bde0
- SSDEEP 49152:a2OxhB0d3dPPuqL+UztNtsabqNb+TgBzsJDoRQXFnb8NejdC6xYAMtzoDF2EJzZd:ALabCp1QhrEjtcpYe9qD527BWG
- TLSH T13F568D1A769900BEC49FC074C74B9A53AA72748A0B707AEF468486793F769F05F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_7fd5e55b16545e3d6d2091216603ebd4_akira_cobalt-strike_glassworm_icedid_mespinoza_njrat_ryuk_stealc_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_7fd5e55b16545e3d6d2091216603ebd4_akira_cobalt-strike_glassworm_icedid_mespinoza_njrat_ryuk_stealc_vidar
- Size 5.8MB
- SHA256 22940e96d6505701c70d56b6f9370b7c8b3a333789a7c080eb753eec66a76808
- MD5 7fd5e55b16545e3d6d2091216603ebd4
- SHA1 3b451688a3721d0e6ce39b3a0e93b205dffb838e
- SHA512 85a756247887649b2ce423b98e5ae1605d024b4d312272c32602b7c9a7bb447729e9210b10287e2fd3771b81e97525492e7a5e1be19ad8c6ce0fa49f3f47bde0
- SSDEEP 49152:a2OxhB0d3dPPuqL+UztNtsabqNb+TgBzsJDoRQXFnb8NejdC6xYAMtzoDF2EJzZd:ALabCp1QhrEjtcpYe9qD527BWG
- TLSH T13F568D1A769900BEC49FC074C74B9A53AA72748A0B707AEF468486793F769F05F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1