General
- Target 2026-10-01_8d51e098ce7a2484d1ec6beed39c9f1e_akira_cobalt-strike_elex_icedid_njrat_vidar
- Size 3.4MB
- Sample261002-k7w6essdkf
- SHA256 28a064268d845740a58d57019711837065e8ec8bf64657a4aa857822de8ece59
- MD5 8d51e098ce7a2484d1ec6beed39c9f1e
- SHA1 c2c6ca2aa9469a5186cf6931108568855bd80578
- SHA512 093c97f5a124cff1897336a6d9280197f9f88a85fee925fb7dd3586f7191e1b15fcd023602f2eaf06dbd2770f27b2ac9bfc2c6a30f96aae5ccb42d3f9f241160
- SSDEEP 49152:D3OFX6wiIBtbkWwagTNFsEd3p0uBjfKPh1pXqlzgyXMw7K6mwFK6Y3TbZ:7OZTOTNSQBjgitA
- TLSH T1E2F57B03A19940DAD199C034DF468631EB71B89A0BF6B9FF329097153E67AD07B3DB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_8d51e098ce7a2484d1ec6beed39c9f1e_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_8d51e098ce7a2484d1ec6beed39c9f1e_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_8d51e098ce7a2484d1ec6beed39c9f1e_akira_cobalt-strike_elex_icedid_njrat_vidar
- Size 3.4MB
- SHA256 28a064268d845740a58d57019711837065e8ec8bf64657a4aa857822de8ece59
- MD5 8d51e098ce7a2484d1ec6beed39c9f1e
- SHA1 c2c6ca2aa9469a5186cf6931108568855bd80578
- SHA512 093c97f5a124cff1897336a6d9280197f9f88a85fee925fb7dd3586f7191e1b15fcd023602f2eaf06dbd2770f27b2ac9bfc2c6a30f96aae5ccb42d3f9f241160
- SSDEEP 49152:D3OFX6wiIBtbkWwagTNFsEd3p0uBjfKPh1pXqlzgyXMw7K6mwFK6Y3TbZ:7OZTOTNSQBjgitA
- TLSH T1E2F57B03A19940DAD199C034DF468631EB71B89A0BF6B9FF329097153E67AD07B3DB24
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1