General
- Target 2026-10-26_6c32fd81f6ecaf1d03029af2bbdaf0fc_akira_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.6MB
- Sample261027-sg2bfsvtht
- SHA256 0fc5f75b52ece7f1296200779945c5ea9d5a3c35a46fe54c3deae97daeaaa0d2
- MD5 6c32fd81f6ecaf1d03029af2bbdaf0fc
- SHA1 31893bb563ee79794cc722ccb776edfc67d7ad7c
- SHA512 4eeff2e2ac2a79054d89d0620b2742c498d5a9b9a49aade2bc1cb9cd23970675d340bb02c6592c224a5fec6a229ee69449282cd9762c31a6c851acc054b8dcea
- SSDEEP 24576:JhNVU+0ImOT62S6aSB1bbfYH6vQVSKNx4fl5Tn7UOy/t3z0+ld:J162NV1QSmSKNKfXTnC9T
- TLSH T1C785BE1A725841E8F577D07CC9B68A07EAB23C4A132196CB16E477AE1F376E05E7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_6c32fd81f6ecaf1d03029af2bbdaf0fc_akira_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_6c32fd81f6ecaf1d03029af2bbdaf0fc_akira_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.6MB
- SHA256 0fc5f75b52ece7f1296200779945c5ea9d5a3c35a46fe54c3deae97daeaaa0d2
- MD5 6c32fd81f6ecaf1d03029af2bbdaf0fc
- SHA1 31893bb563ee79794cc722ccb776edfc67d7ad7c
- SHA512 4eeff2e2ac2a79054d89d0620b2742c498d5a9b9a49aade2bc1cb9cd23970675d340bb02c6592c224a5fec6a229ee69449282cd9762c31a6c851acc054b8dcea
- SSDEEP 24576:JhNVU+0ImOT62S6aSB1bbfYH6vQVSKNx4fl5Tn7UOy/t3z0+ld:J162NV1QSmSKNKfXTnC9T
- TLSH T1C785BE1A725841E8F577D07CC9B68A07EAB23C4A132196CB16E477AE1F376E05E7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1