General
- Target 2026-08-18_051a187bedd36b5c39cab1fe7c2cc291_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 2.1MB
- Sample260818-qe5vrabp4s
- SHA256 38cf34df8772fbcd6848e72e50b45b615d3af33f64cb402aaac549e880df93cd
- MD5 051a187bedd36b5c39cab1fe7c2cc291
- SHA1 379218996daf07f8195a5a9784b090b7a481f8d7
- SHA512 b5d012ceb76873df46d54d2605191f3d72a5af6e4f23482168b3f3408a15cdbde81ecabfdb0a49f00d3d5070fd8a55842fdc2ac898b258d5fc3460267beafb3e
- SSDEEP 49152:bKSyBpFTN01vp2rjzGr4LNiXicJFFRGNzj3:b9EN01vcrjKs7wRGpj3
- TLSH T199A505377297D0D4C41D90B4CF160AF195A17CA9C7E59BDB01CC7E24BB32AE07ABA609
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_051a187bedd36b5c39cab1fe7c2cc291_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_051a187bedd36b5c39cab1fe7c2cc291_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 2.1MB
- SHA256 38cf34df8772fbcd6848e72e50b45b615d3af33f64cb402aaac549e880df93cd
- MD5 051a187bedd36b5c39cab1fe7c2cc291
- SHA1 379218996daf07f8195a5a9784b090b7a481f8d7
- SHA512 b5d012ceb76873df46d54d2605191f3d72a5af6e4f23482168b3f3408a15cdbde81ecabfdb0a49f00d3d5070fd8a55842fdc2ac898b258d5fc3460267beafb3e
- SSDEEP 49152:bKSyBpFTN01vp2rjzGr4LNiXicJFFRGNzj3:b9EN01vcrjKs7wRGpj3
- TLSH T199A505377297D0D4C41D90B4CF160AF195A17CA9C7E59BDB01CC7E24BB32AE07ABA609
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1