General
- Target 2026-08-23_cfa766bcf644f76ed42277630a650a21_akira_cobalt-strike_icedid_njrat_satacom_vidar
- Size 634KB
- Sample260823-y73j4azeph
- SHA256 827493e89e354a7e0fca685392ea576006827e71208b8f35875c32b223a4e28c
- MD5 cfa766bcf644f76ed42277630a650a21
- SHA1 f1c0804789a5a058f80e7b6bd5e4c1d22b1b7843
- SHA512 74adc1015400b0836e3e9c57c85b5088e416aafff9eda7012765768a46c099a23514ff0d9fe9b3c6d5473115cb8092c9df2821c51ddf4af53c3780c04f102b1e
- SSDEEP 12288:0DcFd7hewUuJUEBhtHSe8g3Dwol69ujl0A8Y8a:0DcFd7hewUuDtHD8g3DwA692lR8Y
- TLSH T1F4D48DA672A601F8D077E13DD9925503E6B534890735CBEF13A04A362F277E1AE3EB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_cfa766bcf644f76ed42277630a650a21_akira_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_cfa766bcf644f76ed42277630a650a21_akira_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_cfa766bcf644f76ed42277630a650a21_akira_cobalt-strike_icedid_njrat_satacom_vidar
- Size 634KB
- SHA256 827493e89e354a7e0fca685392ea576006827e71208b8f35875c32b223a4e28c
- MD5 cfa766bcf644f76ed42277630a650a21
- SHA1 f1c0804789a5a058f80e7b6bd5e4c1d22b1b7843
- SHA512 74adc1015400b0836e3e9c57c85b5088e416aafff9eda7012765768a46c099a23514ff0d9fe9b3c6d5473115cb8092c9df2821c51ddf4af53c3780c04f102b1e
- SSDEEP 12288:0DcFd7hewUuJUEBhtHSe8g3Dwol69ujl0A8Y8a:0DcFd7hewUuDtHD8g3DwA692lR8Y
- TLSH T1F4D48DA672A601F8D077E13DD9925503E6B534890735CBEF13A04A362F277E1AE3EB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.