2026-08-29_fa0370d13e553cb33cbc6726d495ca2a_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

General

Target
2026-08-29_fa0370d13e553cb33cbc6726d495ca2a_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar
Size 308KB
Sample260830-23tceabj8x
SHA256 1af480d601f87a487a4dc719de25126286496005bfa50c0c281d3f7d235370c6
MD5 fa0370d13e553cb33cbc6726d495ca2a
SHA1 4e5b395b7b6c0af8bc0b86b51c25580e4abc5355
SHA512 20467f049882a71a823c6a352eb46acc43f01d1ab63953ff225565ca55985102790b2eddfc0f2e7ed83c7dbec0caec7af2adc55ff6a8aac590b66b21d2636615
SSDEEP 6144:h0xb2XPgPNwYxprVGGEKjIBI0KQm8h9HyG65Tq9CF:Sx6KwotE4IfKQm8iz04
TLSH
T188649D15F69564F8E417C0B886414576AA737CC60B32A9EF23A446393F27AE12F3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-29_fa0370d13e553cb33cbc6726d495ca2a_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

File Explorer

2026-08-29_fa0370d13e553cb33cbc6726d495ca2a_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

.exe 308KB

2026-08-29_fa0370d13e553cb33cbc6726d495ca2a_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

IMPHASH 18fcad53be85ed04bd1dd12077f73fe2
SHA256 1af480d601f87a487a4dc719de25126286496005bfa50c0c281d3f7d235370c6
MD5 fa0370d13e553cb33cbc6726d495ca2a
SHA1 4e5b395b7b6c0af8bc0b86b51c25580e4abc5355
SHA512 20467f049882a71a823c6a352eb46acc43f01d1ab63953ff225565ca55985102790b2eddfc0f2e7ed83c7dbec0caec7af2adc55ff6a8aac590b66b21d2636615
SSDEEP 6144:h0xb2XPgPNwYxprVGGEKjIBI0KQm8h9HyG65Tq9CF:Sx6KwotE4IfKQm8iz04
TLSH
T188649D15F69564F8E417C0B886414576AA737CC60B32A9EF23A446393F27AE12F3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

105564

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

pcasvc.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

InitializeSListHead CreateFileW GetProcessHeap HeapFree GetComputerNameA GetTickCount HeapReAlloc GetTickCount64 QueryPerformanceCounter QueryPerformanceFrequency CloseHandle GetLastError VirtualAlloc VirtualProtect VirtualFree GetModuleHandleA GetProcAddress AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetStdHandle GetConsoleMode GetConsoleOutputCP WaitForSingleObject MultiByteToWideChar WriteConsoleW GetCurrentThreadId SetLastError GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetCurrentProcess lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex RtlVirtualUnwind WideCharToMultiByte GetEnvironmentVariableW HeapAlloc GetModuleHandleW FormatMessageW CreateThread CreateWaitableTimerExW SetWaitableTimer Sleep ExitProcess SetFilePointerEx FlushFileBuffers HeapSize LCMapStringW CompareStringW GetSystemTimeAsFileTime IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent RtlUnwindEx EncodePointer RaiseException EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RtlPcToFileHeader WriteFile GetModuleFileNameW TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW

user32

GetWindowRect GetDesktopWindow

ntdll

RtlNtStatusToDosError NtWriteFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-29_fa0370d13e553cb33cbc6726d495ca2a_akira_cobalt-strike_icedid_rusty-stealer_satacom_vidar

api-ms-win-core-synch-l1-2-0

kernel32

user32

ntdll

generic