General
- Target 2026-09-13_34768de18180d2610ed9671ced7954dc_akira_cobalt-strike
- Size 319KB
- Sample260913-txadcazcpf
- SHA256 6fd61215eca99020db73f53ca4ce90b723aa0fa45f315bcc11f96ccb229e3a0b
- MD5 34768de18180d2610ed9671ced7954dc
- SHA1 1d449d5452065027514b50ae6a7537cac243ae70
- SHA512 0de0ecec78c98b48eccc478bbfd18a902d9b56ef1db2f9406dbe38b31d623260734c1e770028cb02dcc278372b480b7589ad500cf58b44bcde77123134011bd5
- SSDEEP 3072:Q2ogeileZKXw1RPlyCCwdMUFbwnsIjr5nOmmZ3eazwhm4qE/24r4wUTPbWNtKHtX:QYeNKgHNxdBGomoBEu4r5ZsfwEI
- TLSH T1B0646D57F6A290BCD25AC078935AA5B3BB33B8C902227DBF12F895303E56D512F1CB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_34768de18180d2610ed9671ced7954dc_akira_cobalt-strike.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_34768de18180d2610ed9671ced7954dc_akira_cobalt-strike.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_34768de18180d2610ed9671ced7954dc_akira_cobalt-strike
- Size 319KB
- SHA256 6fd61215eca99020db73f53ca4ce90b723aa0fa45f315bcc11f96ccb229e3a0b
- MD5 34768de18180d2610ed9671ced7954dc
- SHA1 1d449d5452065027514b50ae6a7537cac243ae70
- SHA512 0de0ecec78c98b48eccc478bbfd18a902d9b56ef1db2f9406dbe38b31d623260734c1e770028cb02dcc278372b480b7589ad500cf58b44bcde77123134011bd5
- SSDEEP 3072:Q2ogeileZKXw1RPlyCCwdMUFbwnsIjr5nOmmZ3eazwhm4qE/24r4wUTPbWNtKHtX:QYeNKgHNxdBGomoBEu4r5ZsfwEI
- TLSH T1B0646D57F6A290BCD25AC078935AA5B3BB33B8C902227DBF12F895303E56D512F1CB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.