General
- Target 2026-09-10_09c0345311a8813b51d4368802f4fcee_akira_cobalt-strike_icedid_rusty-stealer
- Size 497KB
- Sample260910-y3nkdawamd
- SHA256 d1ff9645e0b01a6d8426c72b021d6c48754b65b49b055e140d4de4c0475eb817
- MD5 09c0345311a8813b51d4368802f4fcee
- SHA1 56ef27084ecf760c21896d90f947d6bcbd750426
- SHA512 caaf34fdd304b22a40a61df880d04cb0e69388d263155d7fb86be9b0bf9054dcf856dd20905f90126622d754b2286d0dfbc52ac05f51d4e6877865275e4d524c
- SSDEEP 12288:WUvRMYWROHham+dQ2dJBa8LFxPvhYW8AR:WUvRUmB+ddrxPXR
- TLSH T1DEB4F166F39417F8C45AC27A89956A41F2B278569F818AEF43A006831F777D13E3EF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_09c0345311a8813b51d4368802f4fcee_akira_cobalt-strike_icedid_rusty-stealer.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_09c0345311a8813b51d4368802f4fcee_akira_cobalt-strike_icedid_rusty-stealer.exe
Resource
win11ltsc2024-20260710-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_09c0345311a8813b51d4368802f4fcee_akira_cobalt-strike_icedid_rusty-stealer
- Size 497KB
- SHA256 d1ff9645e0b01a6d8426c72b021d6c48754b65b49b055e140d4de4c0475eb817
- MD5 09c0345311a8813b51d4368802f4fcee
- SHA1 56ef27084ecf760c21896d90f947d6bcbd750426
- SHA512 caaf34fdd304b22a40a61df880d04cb0e69388d263155d7fb86be9b0bf9054dcf856dd20905f90126622d754b2286d0dfbc52ac05f51d4e6877865275e4d524c
- SSDEEP 12288:WUvRMYWROHham+dQ2dJBa8LFxPvhYW8AR:WUvRUmB+ddrxPXR
- TLSH T1DEB4F166F39417F8C45AC27A89956A41F2B278569F818AEF43A006831F777D13E3EF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.