2026-08-14_1596603c0c5a461d5eead5ae4e588e3e_akira_cobalt-strike_icedid_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_1596603c0c5a461d5eead5ae4e588e3e_akira_cobalt-strike_icedid_satacom_vidar
Size 2.0MB
Sample260814-ftz8psfd75
SHA256 d373abc8585af75d66dd65a10edae68a182b1bb6f81654f346120b315ae736d1
MD5 1596603c0c5a461d5eead5ae4e588e3e
SHA1 12cc3cd72462d715dd92ab0f64388d1f4aea349d
SHA512 405de5a9806c9eb5b600c9c76cbfa4696c4c9d1f22e262b5ebc9581759a71c9be15939522d2f11170f2fbb99e7abf3d2c313db3ce5d5471c8029c80cfc3e62ff
SSDEEP 49152:1KktaRcMxxzoVtkhn7UnO5+N6fsGW+jIU6iuT:SbHYkh4nL6xS+u
TLSH
T179A56B07F39141E9E4EED574C3979322EB71BC8D0626B7AB1BD02A213E22B905F0D795
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_1596603c0c5a461d5eead5ae4e588e3e_akira_cobalt-strike_icedid_satacom_vidar

File Explorer

2026-08-14_1596603c0c5a461d5eead5ae4e588e3e_akira_cobalt-strike_icedid_satacom_vidar

.exe 2.0MB

2026-08-14_1596603c0c5a461d5eead5ae4e588e3e_akira_cobalt-strike_icedid_satacom_vidar

IMPHASH 29f23909f63cf89d5a3db2737e92a076
SHA256 d373abc8585af75d66dd65a10edae68a182b1bb6f81654f346120b315ae736d1
MD5 1596603c0c5a461d5eead5ae4e588e3e
SHA1 12cc3cd72462d715dd92ab0f64388d1f4aea349d
SHA512 405de5a9806c9eb5b600c9c76cbfa4696c4c9d1f22e262b5ebc9581759a71c9be15939522d2f11170f2fbb99e7abf3d2c313db3ce5d5471c8029c80cfc3e62ff
SSDEEP 49152:1KktaRcMxxzoVtkhn7UnO5+N6fsGW+jIU6iuT:SbHYkh4nL6xS+u
TLSH
T179A56B07F39141E9E4EED574C3979322EB71BC8D0626B7AB1BD02A213E22B905F0D795
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1369348

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

SystemFunction036

ntdll

RtlLookupFunctionEntry RtlCaptureContext NtCancelIoFileEx RtlUnwindEx RtlNtStatusToDosError NtDeviceIoControlFile NtCreateFile RtlVirtualUnwind

kernel32

GetConsoleCP FlushFileBuffers HeapSize LCMapStringW GetProcessHeap HeapAlloc HeapFree HeapReAlloc SwitchToThread CompareStringW DeleteFileW TerminateProcess GetEnvironmentStringsW FreeEnvironmentStringsW CreateProcessW CloseHandle RegisterWaitForSingleObject GetStringTypeW GetQueuedCompletionStatusEx CreateIoCompletionPort SetFileCompletionNotificationModes GetFileType PostQueuedCompletionStatus SetStdHandle SetEnvironmentVariableW CancelIoEx WideCharToMultiByte MultiByteToWideChar GetCPInfo GetOEMCP WriteFile GetOverlappedResult ReadFile GetACP SetHandleInformation TlsGetValue TlsSetValue GetLastError FormatMessageW GetConsoleMode GetStdHandle WriteConsoleW DeleteCriticalSection GetProcAddress QueryPerformanceFrequency IsValidCodePage LeaveCriticalSection EnterCriticalSection InitializeCriticalSection TlsAlloc FindNextFileW FindFirstFileExW GetFileInformationByHandle DeviceIoControl CreateFileW GetCurrentProcess DuplicateHandle SetFilePointerEx CreateDirectoryW FindClose GetCurrentProcessId CreateNamedPipeW QueryPerformanceCounter GetSystemTimeAsFileTime SetLastError GetEnvironmentVariableW TryEnterCriticalSection CreateThread GetCurrentThread WaitForSingleObject GetCommandLineW GetCommandLineA GetModuleHandleExW GetExitCodeProcess UnregisterWaitEx ExitProcess GetSystemInfo Sleep GetModuleFileNameW GetModuleHandleW RaiseException LoadLibraryExW FreeLibrary UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW InitializeCriticalSectionAndSpinCount TlsFree

ws2_32

WSACleanup WSAStartup getaddrinfo WSASocketW WSASend setsockopt WSAGetOverlappedResult ioctlsocket WSARecv bind WSAIoctl listen sendto WSAGetLastError recvfrom getsockname closesocket getsockopt WSASendTo freeaddrinfo getpeername recv shutdown socket WSARecvFrom

bcrypt

BCryptGenRandom

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-14_1596603c0c5a461d5eead5ae4e588e3e_akira_cobalt-strike_icedid_satacom_vidar

advapi32

ntdll

kernel32

ws2_32

bcrypt

generic