2026-08-24_15669d3fc377877a55f67eb466f3ec06_akira_cobalt-strike

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-24_15669d3fc377877a55f67eb466f3ec06_akira_cobalt-strike
Size 524KB
Sample260825-w7dvmaxeqe
SHA256 cefcfe43691d8bd3c386b5dfa8a1db390e9f0edacf607ea2c15804abc76c236f
MD5 15669d3fc377877a55f67eb466f3ec06
SHA1 81b13efb6f97d44f04d2e51e8b8f55320e018cb9
SHA512 203f3e81db06eae018d09126edc22734ba31d52359ac5b88be68bfaa7f9bb4517070fe537b320c933ef1b2a335e8aeafa981591966a856601ba41f7a68555723
SSDEEP 6144:FaeCF5F2w1AugigeIL29GpNjxfl7VVzOQVMJ2dEJyrlXqInxM1wl1JNLNr+YJ:Fej2wOZifGH9fljJVE5UVq4rNLN
TLSH
T1A9B45D47FA6291BCD11AC038835AA173BA37B88906317DBB13E4AA313F75E506F2D715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_15669d3fc377877a55f67eb466f3ec06_akira_cobalt-strike

File Explorer

2026-08-24_15669d3fc377877a55f67eb466f3ec06_akira_cobalt-strike

.exe 524KB

2026-08-24_15669d3fc377877a55f67eb466f3ec06_akira_cobalt-strike

IMPHASH dc638e2016b1a263a0cf7fc881d7e67c
SHA256 cefcfe43691d8bd3c386b5dfa8a1db390e9f0edacf607ea2c15804abc76c236f
MD5 15669d3fc377877a55f67eb466f3ec06
SHA1 81b13efb6f97d44f04d2e51e8b8f55320e018cb9
SHA512 203f3e81db06eae018d09126edc22734ba31d52359ac5b88be68bfaa7f9bb4517070fe537b320c933ef1b2a335e8aeafa981591966a856601ba41f7a68555723
SSDEEP 6144:FaeCF5F2w1AugigeIL29GpNjxfl7VVzOQVMJ2dEJyrlXqInxM1wl1JNLNr+YJ:Fej2wOZifGH9fljJVE5UVq4rNLN
TLSH
T1A9B45D47FA6291BCD11AC038835AA173BA37B88906317DBB13E4AA313F75E506F2D715
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CreateDirectoryW CreateEventW CreateFileMappingA CreateFileW CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DuplicateHandle EnterCriticalSection FindClose FindFirstFileExW FormatMessageW FreeEnvironmentStringsW GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetSystemDirectoryW GetSystemTimePreciseAsFileTime GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection LeaveCriticalSection MapViewOfFile Module32FirstW Module32NextW MoveFileExW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReadFileEx RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetFileInformationByHandle SetFileTime SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFileEx __C_specific_handler

msvcrt

__getmainargs __initenv __iob_func __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _commode _fmode _fpreset _initterm _onexit abort calloc exit floor fprintf free fwrite malloc memcmp memcpy memmove memset signal strlen strncmp vfprintf

ntdll

NtCreateNamedPipeFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

Name

.text

Size

417KB

Virtual Size

417KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

71KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_15669d3fc377877a55f67eb466f3ec06_akira_cobalt-strike

api-ms-win-core-synch-l1-2-0

kernel32

msvcrt

ntdll

generic