General
- Target 2026-08-14_c3a3b0550335ba473236c681b9ec9656_akira_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 5.0MB
- Sample260814-ptkmpatcld
- SHA256 8744d0ae3e45479a4defaf8cf8a4f9ee16129a19b12e7f5cb2d8fe34f5bbb5d8
- MD5 c3a3b0550335ba473236c681b9ec9656
- SHA1 f4934d3723f94a66b840a1607527bae19aeb2075
- SHA512 04748d209e15c78744325dfb5184ba3e9bed548ebdb599497e2f29074d6c985b0879931205a0ed0de47bb3ffbb4a80291eee6d5b1cbb1cc8952da8a72ac5ed9e
- SSDEEP 49152:0iX15IJv/pKKCECpExtwDzS9MAvM6+kuXunb7Q97/tKJ+AaLLeNF7pahCtIbHgqC:OJ0Py9Mt/XuaK+FhC4Yix8EVy
- TLSH T179367B53A36611B8D46FC8B4CF29542296253C8A43F496FF26D876F51A32ED43B38F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_c3a3b0550335ba473236c681b9ec9656_akira_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_c3a3b0550335ba473236c681b9ec9656_akira_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 5.0MB
- SHA256 8744d0ae3e45479a4defaf8cf8a4f9ee16129a19b12e7f5cb2d8fe34f5bbb5d8
- MD5 c3a3b0550335ba473236c681b9ec9656
- SHA1 f4934d3723f94a66b840a1607527bae19aeb2075
- SHA512 04748d209e15c78744325dfb5184ba3e9bed548ebdb599497e2f29074d6c985b0879931205a0ed0de47bb3ffbb4a80291eee6d5b1cbb1cc8952da8a72ac5ed9e
- SSDEEP 49152:0iX15IJv/pKKCECpExtwDzS9MAvM6+kuXunb7Q97/tKJ+AaLLeNF7pahCtIbHgqC:OJ0Py9Mt/XuaK+FhC4Yix8EVy
- TLSH T179367B53A36611B8D46FC8B4CF29542296253C8A43F496FF26D876F51A32ED43B38F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1