General
- Target 2026-09-13_264b7c2b49358fba679bd470aa376325_akira_cobalt-strike_icedid_rusty-stealer
- Size 625KB
- Sample260913-vghkfsap8w
- SHA256 452a210bba4c8d08f7cb7733a816d7220a7fa570a469aea0a997cfc8b594b6a0
- MD5 264b7c2b49358fba679bd470aa376325
- SHA1 12b9d54df394af95221d0813fb296a97a30c35a6
- SHA512 924236489bff3d213af3348d9eba73b52b4d200aa4e3e1c0b716094b0ccc0d201ad0c2b8cac0d0845ef97f260c0d53905d0de685520c62baba80445942371d27
- SSDEEP 12288:RpJ3ytYmemZWsy+7XPyWD+eCmupHFhYOG0lD5QdTCfD90n:RztyZrl7PDfCmupHFjGCDGdTCfD90
- TLSH T17CD4E132B66909DAC129817B896D1925E7E5B8400764C3FF86D001A63E7EBEC9D7DF30
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_264b7c2b49358fba679bd470aa376325_akira_cobalt-strike_icedid_rusty-stealer.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_264b7c2b49358fba679bd470aa376325_akira_cobalt-strike_icedid_rusty-stealer.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_264b7c2b49358fba679bd470aa376325_akira_cobalt-strike_icedid_rusty-stealer
- Size 625KB
- SHA256 452a210bba4c8d08f7cb7733a816d7220a7fa570a469aea0a997cfc8b594b6a0
- MD5 264b7c2b49358fba679bd470aa376325
- SHA1 12b9d54df394af95221d0813fb296a97a30c35a6
- SHA512 924236489bff3d213af3348d9eba73b52b4d200aa4e3e1c0b716094b0ccc0d201ad0c2b8cac0d0845ef97f260c0d53905d0de685520c62baba80445942371d27
- SSDEEP 12288:RpJ3ytYmemZWsy+7XPyWD+eCmupHFhYOG0lD5QdTCfD90n:RztyZrl7PDfCmupHFjGCDGdTCfD90
- TLSH T17CD4E132B66909DAC129817B896D1925E7E5B8400764C3FF86D001A63E7EBEC9D7DF30
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext