General
- Target 2026-09-24_0ad5af329f1a38eefeed96e1bda9c6eb_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 2.7MB
- Sample260925-srwtqa1w9n
- SHA256 39b1cd1670d1b925ed9e772c6c13794ab221f3748fd9f637a5b6ecb6cc3c0212
- MD5 0ad5af329f1a38eefeed96e1bda9c6eb
- SHA1 3bf321a7d770c069a13d8051db73f9ce295553ca
- SHA512 33590e7de7bc0a7e9494aa142117ef89a618439a05628df5ae105d8ee660abc0344cb96e0429ffdcaf30c0885fe2b7c55ce221ca1b6398a182d17d3f65cefbc7
- SSDEEP 49152:U3K8+5FtFpJzflDNiyH80ytwIW2qqU4rRMBs3KuZhutwKQ7P6Q+02djecpBFzLFO:lnPflW0ytwZ2qP4rRMBs3KuZhutwKQ7O
- TLSH T152D5BE06A6A801E8D0A7C178C91A5657E7B13C8517309BDF12D07A776F73AE21EFE720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_0ad5af329f1a38eefeed96e1bda9c6eb_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_0ad5af329f1a38eefeed96e1bda9c6eb_akira_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 2.7MB
- SHA256 39b1cd1670d1b925ed9e772c6c13794ab221f3748fd9f637a5b6ecb6cc3c0212
- MD5 0ad5af329f1a38eefeed96e1bda9c6eb
- SHA1 3bf321a7d770c069a13d8051db73f9ce295553ca
- SHA512 33590e7de7bc0a7e9494aa142117ef89a618439a05628df5ae105d8ee660abc0344cb96e0429ffdcaf30c0885fe2b7c55ce221ca1b6398a182d17d3f65cefbc7
- SSDEEP 49152:U3K8+5FtFpJzflDNiyH80ytwIW2qqU4rRMBs3KuZhutwKQ7P6Q+02djecpBFzLFO:lnPflW0ytwZ2qP4rRMBs3KuZhutwKQ7O
- TLSH T152D5BE06A6A801E8D0A7C178C91A5657E7B13C8517309BDF12D07A776F73AE21EFE720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1