General
- Target 2026-09-29_5af9cd839fe4cbba3e5e46bcc78dce58_akira_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.4MB
- Sample260930-y84hsas16r
- SHA256 03158d7b87b3f661e2019693c899429d8f75a10e250b1642a239c07868f4d5f6
- MD5 5af9cd839fe4cbba3e5e46bcc78dce58
- SHA1 a4e5083607a68a98c3f85655d597792348e9c231
- SHA512 222d091c5c637c5c62c0c7ba83437eb669b8ae034a658ab3d6eec6d153e50535daa6dea7d15e4ab649e382b8d5f29bb7133332a8d435f15838e169b5dff6573b
- SSDEEP 24576:3vca+6d6nytgZpnCrfTXYaNhVl+lnQ/tbw/2Mkjy6Fr7g0o:Ua+6InytwZCr7XYuVqQ/lFTjN4
- TLSH T12565AD576E6803F8E47781388862B902E6B23CF607619ADB03B07F761E772E14D7A751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_5af9cd839fe4cbba3e5e46bcc78dce58_akira_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_5af9cd839fe4cbba3e5e46bcc78dce58_akira_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_5af9cd839fe4cbba3e5e46bcc78dce58_akira_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.4MB
- SHA256 03158d7b87b3f661e2019693c899429d8f75a10e250b1642a239c07868f4d5f6
- MD5 5af9cd839fe4cbba3e5e46bcc78dce58
- SHA1 a4e5083607a68a98c3f85655d597792348e9c231
- SHA512 222d091c5c637c5c62c0c7ba83437eb669b8ae034a658ab3d6eec6d153e50535daa6dea7d15e4ab649e382b8d5f29bb7133332a8d435f15838e169b5dff6573b
- SSDEEP 24576:3vca+6d6nytgZpnCrfTXYaNhVl+lnQ/tbw/2Mkjy6Fr7g0o:Ua+6InytwZCr7XYuVqQ/lFTjN4
- TLSH T12565AD576E6803F8E47781388862B902E6B23CF607619ADB03B07F761E772E14D7A751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1