2026-09-16_f45d89a10a603a0b07160c6c697678e8_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_f45d89a10a603a0b07160c6c697678e8_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar
Size 3.6MB
Sample260916-stf62swy4k
SHA256 4ca1e54c85c76d044c2c3bd5e3187f52b44391b065d3291f70668f3cbe4d4c96
MD5 f45d89a10a603a0b07160c6c697678e8
SHA1 16b83fc1a4feea3adf27f82ed8e94e869569aaed
SHA512 0ea4e07a3322bb38f3f104e8d648e57f1d710ab7a24398bd2a26a768853003acb68ce30f42de97453b8a8d06196d0217878a164fe885866202f710359b72fa93
SSDEEP 49152:ihwR5+XV86N/yz//uNMZb/oDpSZbSvYjnvfw4OdpX+TYBVqiT8KQk/8Q2x+Qv:+Y46P/uNerjeXlqy03
TLSH
T14D067D07F6A640ECD066C179C70A6623FB72B84967217BEB06E086353F66EE01B7D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_f45d89a10a603a0b07160c6c697678e8_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar

File Explorer

2026-09-16_f45d89a10a603a0b07160c6c697678e8_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar

.exe 3.6MB

2026-09-16_f45d89a10a603a0b07160c6c697678e8_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar

IMPHASH 6e7e2dcf8354dbac1cbed638bff52837
SHA256 4ca1e54c85c76d044c2c3bd5e3187f52b44391b065d3291f70668f3cbe4d4c96
MD5 f45d89a10a603a0b07160c6c697678e8
SHA1 16b83fc1a4feea3adf27f82ed8e94e869569aaed
SHA512 0ea4e07a3322bb38f3f104e8d648e57f1d710ab7a24398bd2a26a768853003acb68ce30f42de97453b8a8d06196d0217878a164fe885866202f710359b72fa93
SSDEEP 49152:ihwR5+XV86N/yz//uNMZb/oDpSZbSvYjnvfw4OdpX+TYBVqiT8KQk/8Q2x+Qv:+Y46P/uNerjeXlqy03
TLSH
T14D067D07F6A640ECD066C179C70A6623FB72B84967217BEB06E086353F66EE01B7D714
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2782076

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

svcutil.pdb

kernel32

SetLastError GetLastError GetStdHandle SetStdHandle GetConsoleMode AreFileApisANSI GetDiskFreeSpaceW LockFile SetFilePointer GetFullPathNameA SetEndOfFile GetFileAttributesW GetTempPathA GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW CreateFileA DeleteFileA UnlockFile LocalFree GetFileSize FreeLibrary CopyFileExW FlushFileBuffers SetFilePointerEx FindNextFileW GetFileType DeleteFileW GetTempPathW CreateDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle FindClose FindFirstFileExW SetFileInformationByHandle SetFileTime CreateFileW GetFullPathNameW WriteConsoleW SetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo SetConsoleTextAttribute CloseHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetTimeZoneInformation GetCommandLineA GetModuleHandleExW FreeLibraryAndExitThread ExitThread GetStringTypeW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer RtlUnwindEx GetStartupInfoW IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection RaiseException ReadFile HeapCreate WriteFile RtlPcToFileHeader ExitProcess GetProcessHeap HeapFree HeapReAlloc SwitchToThread GetCommandLineW GetModuleFileNameW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex RtlVirtualUnwind WideCharToMultiByte WaitForSingleObject MultiByteToWideChar HeapAlloc GetEnvironmentVariableW QueryPerformanceFrequency GetModuleHandleW FormatMessageW QueryPerformanceCounter GetModuleHandleA CreateWaitableTimerExW SetWaitableTimer Sleep CreateThread GetSystemTimePreciseAsFileTime GetTickCount MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime LockFileEx HeapDestroy HeapCompact LoadLibraryW GetSystemInfo GetNativeSystemInfo FlushViewOfFile OutputDebugStringW HeapSize HeapValidate UnmapViewOfFile CreateMutexW UnlockFileEx OutputDebugStringA

ntdll

NtWriteFile NtReadFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_f45d89a10a603a0b07160c6c697678e8_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom_vidar

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

bcryptprimitives

bcrypt

advapi32

generic