00d6af429ebe090a8051a9f4599aa8605594561458ff4671c5a7361c33b96241

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/09/2026, 09:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-27_0250d3827bfb70299f2845c061afd80f_akira_cobalt-strike_icedid_rusty-stealer.exe
Size 382KB
Sample260928-lfxtba1aja
SHA256 00d6af429ebe090a8051a9f4599aa8605594561458ff4671c5a7361c33b96241
MD5 0250d3827bfb70299f2845c061afd80f
SHA1 02c117bed1495a05e723e61b3f1b5f14dfe343c0
SHA512 f017106e6087138bc89b70acc74921b00ac277398f6c73babd900f7f4d9c7e9d6f9efa4e22303cce28b6f99e0a45be6116058a3adeedc2b41e053f6970910c9d
SSDEEP 6144:MErJt0Ppa7r0/oYVpydP+FAnH4uj0zKKJ1gqm:PJtggPFdtd
TLSH
T1FC846C25FA5148FDD057C07482568976A97238CE0F32ADEF2299423D2F7AAF65F3C214
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

bootkit defense_evasion persistence

Malware Config

Signatures

Disables Task Manager via registry modification
defense_evasion

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	2026-09-27_0250d3827bfb70299f2845c061afd80f_akira_cobalt-strike_icedid_rusty-stealer.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-27_0250d3827bfb70299f2845c061afd80f_akira_cobalt-strike_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-27_0250d3827bfb70299f2845c061afd80f_akira_cobalt-strike_icedid_rusty-stealer.exe"
1⤵
- Writes to the Master Boot Record (MBR)
PID:2420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads