General
- Target 2026-10-10_6947f412ba91ac1b9c09ca4e52fd3620_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 2.1MB
- Sample261011-pdmgcahe95
- SHA256 2c6bfd2c8ea88ed350d87a42521eabda685294ddcee29a8353fa67d008583d2e
- MD5 6947f412ba91ac1b9c09ca4e52fd3620
- SHA1 c9fdf83fe9ccf61440e529d25fc37f4f82a19469
- SHA512 641db026ac52cc58f3b1820d442426fe6ba7538a87f388be07246d122e725bad1879a89da3274e3369c602b4936b38e46e168c043934c53e4d00370626d75da2
- SSDEEP 24576:RdY4jyB8iFTEIK5L1vpsvUrdp05K9or0Esv20MiyQErBGGZWAsM:RKSyBpFTN01vpbrjzGr0EiyZF8
- TLSH T18AA505377297D0D4C41D90B4CF160AF195A17CA9C7E59BDB01CCBE24BB326E07ABA609
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_6947f412ba91ac1b9c09ca4e52fd3620_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_6947f412ba91ac1b9c09ca4e52fd3620_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 2.1MB
- SHA256 2c6bfd2c8ea88ed350d87a42521eabda685294ddcee29a8353fa67d008583d2e
- MD5 6947f412ba91ac1b9c09ca4e52fd3620
- SHA1 c9fdf83fe9ccf61440e529d25fc37f4f82a19469
- SHA512 641db026ac52cc58f3b1820d442426fe6ba7538a87f388be07246d122e725bad1879a89da3274e3369c602b4936b38e46e168c043934c53e4d00370626d75da2
- SSDEEP 24576:RdY4jyB8iFTEIK5L1vpsvUrdp05K9or0Esv20MiyQErBGGZWAsM:RKSyBpFTN01vpbrjzGr0EiyZF8
- TLSH T18AA505377297D0D4C41D90B4CF160AF195A17CA9C7E59BDB01CCBE24BB326E07ABA609
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1