General
- Target 2026-09-29_37aba4ed198b5cb9d24d1bef8f0820e4_akira_cobalt-strike_icedid_rusty-stealer_ryuk
- Size 644KB
- Sample260930-dlvbdaxybx
- SHA256 415a9ee11a6d3cb1538884826490d689718256a5bcc0d3196e36e88fdc3cd748
- MD5 37aba4ed198b5cb9d24d1bef8f0820e4
- SHA1 d4415a2a908a6c71a4a3990597e41fc7f14043e3
- SHA512 43a13b7f945dc5930c65a2fdb60433dd0abb2b424de954fe296e8c85d91eb9dec281a72f78c8c3d3a47eb58a957bd67cf777f1e1776f5882bfa309729b148433
- SSDEEP 12288:GWC8lXcUGDniefFCZw6l7n2sjeuZyyJOaJY1OIWV6u8fJw4id:GWJ9e9CZwUnFjeo/4aJYQIu6u8xB8
- TLSH T1DDE4E171B96078FAD02F607360685129ABF1FC251D806BDF0674FA36AFA16CD0D6B781
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_37aba4ed198b5cb9d24d1bef8f0820e4_akira_cobalt-strike_icedid_rusty-stealer_ryuk.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_37aba4ed198b5cb9d24d1bef8f0820e4_akira_cobalt-strike_icedid_rusty-stealer_ryuk
- Size 644KB
- SHA256 415a9ee11a6d3cb1538884826490d689718256a5bcc0d3196e36e88fdc3cd748
- MD5 37aba4ed198b5cb9d24d1bef8f0820e4
- SHA1 d4415a2a908a6c71a4a3990597e41fc7f14043e3
- SHA512 43a13b7f945dc5930c65a2fdb60433dd0abb2b424de954fe296e8c85d91eb9dec281a72f78c8c3d3a47eb58a957bd67cf777f1e1776f5882bfa309729b148433
- SSDEEP 12288:GWC8lXcUGDniefFCZw6l7n2sjeuZyyJOaJY1OIWV6u8fJw4id:GWJ9e9CZwUnFjeo/4aJYQIu6u8xB8
- TLSH T1DDE4E171B96078FAD02F607360685129ABF1FC251D806BDF0674FA36AFA16CD0D6B781
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext