General
- Target 2026-08-12_c5f56dc957a00438410558e103cda606_akira_cobalt-strike
- Size 847KB
- Sample260813-agylfsv1as
- SHA256 8b7dc0672350803134dab6be503fdfd6d36c187081dd75a5d8f388bf50ee0cb2
- MD5 c5f56dc957a00438410558e103cda606
- SHA1 717ed8312f9be6563e4ef56ece648ac65af8c979
- SHA512 ec142287eaed1b8d71e9a76a836bc1b59e3f3bf898b3ea0d837b429b18d191a04c3e154cb211c41f651106a3b68e149f8c8c817cb99b9f89c906fbf868f0ec6f
- SSDEEP 24576:J3BwG8F4LWnwzZONHP/n671Op8qRs2GP5Hw:dGG8FpwlOBn671OCqR/GP5Hw
- TLSH T19705D0AAB5999CBDE212C03D8157A1377B3A35C52233BFB319A89A301F13EC16F55316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_c5f56dc957a00438410558e103cda606_akira_cobalt-strike.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_c5f56dc957a00438410558e103cda606_akira_cobalt-strike.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_c5f56dc957a00438410558e103cda606_akira_cobalt-strike
- Size 847KB
- SHA256 8b7dc0672350803134dab6be503fdfd6d36c187081dd75a5d8f388bf50ee0cb2
- MD5 c5f56dc957a00438410558e103cda606
- SHA1 717ed8312f9be6563e4ef56ece648ac65af8c979
- SHA512 ec142287eaed1b8d71e9a76a836bc1b59e3f3bf898b3ea0d837b429b18d191a04c3e154cb211c41f651106a3b68e149f8c8c817cb99b9f89c906fbf868f0ec6f
- SSDEEP 24576:J3BwG8F4LWnwzZONHP/n671Op8qRs2GP5Hw:dGG8FpwlOBn671OCqR/GP5Hw
- TLSH T19705D0AAB5999CBDE212C03D8157A1377B3A35C52233BFB319A89A301F13EC16F55316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger