General
- Target 2026-08-15_26e522afee6af4544d4a26f8e04c5950_akira_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar
- Size 29.7MB
- Sample260816-a575ssap9w
- SHA256 376150ea4d743b29506c37145632d50860d36ebc07c8b6dfb47b3cd6e798a0c0
- MD5 26e522afee6af4544d4a26f8e04c5950
- SHA1 40d34e94cef04964b0c4f14c99a2a68aec35a48b
- SHA512 304ce63a2baef7162e04fa09d9da2e92ed88ed5fafc24571dcea108ae1a5fb295fc5b88c244e9422547397e09f3f8472d911b88d669fb8cc5608942a5d755fa8
- SSDEEP 393216:m8YNvy0uKnPD0ylavW8c8vrg0NGmn/fg0zlkWUa11xB:C5qAwvW8c8v00omnHg0u4
- TLSH T195677C03F2A210EDD05DC1B89B169522EAB1BC950735B6EF169167212F7AFD06F3DB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_26e522afee6af4544d4a26f8e04c5950_akira_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_26e522afee6af4544d4a26f8e04c5950_akira_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar
- Size 29.7MB
- SHA256 376150ea4d743b29506c37145632d50860d36ebc07c8b6dfb47b3cd6e798a0c0
- MD5 26e522afee6af4544d4a26f8e04c5950
- SHA1 40d34e94cef04964b0c4f14c99a2a68aec35a48b
- SHA512 304ce63a2baef7162e04fa09d9da2e92ed88ed5fafc24571dcea108ae1a5fb295fc5b88c244e9422547397e09f3f8472d911b88d669fb8cc5608942a5d755fa8
- SSDEEP 393216:m8YNvy0uKnPD0ylavW8c8vrg0NGmn/fg0zlkWUa11xB:C5qAwvW8c8v00omnHg0u4
- TLSH T195677C03F2A210EDD05DC1B89B169522EAB1BC950735B6EF169167212F7AFD06F3DB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1