2026-10-26_6c32fd81f6ecaf1d03029af2bbdaf0fc_akira_cobalt-strike_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_6c32fd81f6ecaf1d03029af2bbdaf0fc_akira_cobalt-strike_icedid_njrat_satacom_vidar
Size 1.6MB
Sample261027-sg2bfsvtht
SHA256 0fc5f75b52ece7f1296200779945c5ea9d5a3c35a46fe54c3deae97daeaaa0d2
MD5 6c32fd81f6ecaf1d03029af2bbdaf0fc
SHA1 31893bb563ee79794cc722ccb776edfc67d7ad7c
SHA512 4eeff2e2ac2a79054d89d0620b2742c498d5a9b9a49aade2bc1cb9cd23970675d340bb02c6592c224a5fec6a229ee69449282cd9762c31a6c851acc054b8dcea
SSDEEP 24576:JhNVU+0ImOT62S6aSB1bbfYH6vQVSKNx4fl5Tn7UOy/t3z0+ld:J162NV1QSmSKNKfXTnC9T
TLSH
T1C785BE1A725841E8F577D07CC9B68A07EAB23C4A132196CB16E477AE1F376E05E7E310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_6c32fd81f6ecaf1d03029af2bbdaf0fc_akira_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-10-26_6c32fd81f6ecaf1d03029af2bbdaf0fc_akira_cobalt-strike_icedid_njrat_satacom_vidar

.exe 1.6MB

2026-10-26_6c32fd81f6ecaf1d03029af2bbdaf0fc_akira_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH a51a27b4a9ab810125500874e1b406f0
SHA256 0fc5f75b52ece7f1296200779945c5ea9d5a3c35a46fe54c3deae97daeaaa0d2
MD5 6c32fd81f6ecaf1d03029af2bbdaf0fc
SHA1 31893bb563ee79794cc722ccb776edfc67d7ad7c
SHA512 4eeff2e2ac2a79054d89d0620b2742c498d5a9b9a49aade2bc1cb9cd23970675d340bb02c6592c224a5fec6a229ee69449282cd9762c31a6c851acc054b8dcea
SSDEEP 24576:JhNVU+0ImOT62S6aSB1bbfYH6vQVSKNx4fl5Tn7UOy/t3z0+ld:J162NV1QSmSKNKfXTnC9T
TLSH
T1C785BE1A725841E8F577D07CC9B68A07EAB23C4A132196CB16E477AE1F376E05E7E310
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

346280

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

B:\matlab\bin\win64\ctfxwlauncher.pdb

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey

gdiplus

GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromFileICM GdipCreateBitmapFromFile GdipGetImageHeight GdipGetImageWidth GdipAlloc GdipCloneImage GdiplusShutdown GdiplusStartup GdipFree GdipDisposeImage

gdi32

GetObjectA StretchBlt SelectObject GetDeviceCaps DeleteObject DeleteDC CreateCompatibleDC

kernel32

GetACP FindFirstFileExW OutputDebugStringW GetTimeZoneInformation GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap HeapSize WriteConsoleW SetEndOfFile IsValidCodePage FindClose FindFirstFileW FindNextFileW CreateThread GetModuleFileNameW lstrlenA SetDllDirectoryW MultiByteToWideChar WideCharToMultiByte AttachConsole GetLastError WaitForSingleObject CreateEventA MulDiv RaiseException GetSystemInfo VirtualProtect VirtualQuery FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryExA HeapReAlloc SetConsoleCtrlHandler ReadConsoleW ReadFile SetFilePointerEx GetFileSizeEx SetStdHandle GetFullPathNameW GetCurrentDirectoryW SetCurrentDirectoryW GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW SetEnvironmentVariableW HeapFree HeapAlloc GetCurrentThread ExitProcess FormatMessageA GetStringTypeW QueryPerformanceCounter QueryPerformanceFrequency CloseHandle WaitForSingleObjectEx Sleep SwitchToThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection LocalFree LCMapStringEx SetFileInformationByHandle FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive InitOnceExecuteOnce InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SleepConditionVariableSRW CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetSystemTimeAsFileTime GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetFileInformationByHandleEx CreateSymbolicLinkW TryEnterCriticalSection GetLocaleInfoEx CompareStringEx GetCPInfo GetCurrentProcessId InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess InterlockedPushEntrySList InterlockedFlushSList RtlPcToFileHeader RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetCommandLineA GetCommandLineW CreateFileW GetDriveTypeW GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile RtlUnwind

user32

GetDesktopWindow GetWindowRect EndPaint BeginPaint ReleaseDC GetDC UpdateWindow MoveWindow ShowWindow CreateWindowExA UnregisterClassA RegisterClassA PostQuitMessage DefWindowProcA LoadCursorA DispatchMessageA TranslateMessage GetMessageA SetProcessDPIAware MessageBoxW SendMessageA

oleaut32

SysAllocStringLen SysFreeString

Name

.text

Size

764KB

Virtual Size

764KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

166KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

124KB

Virtual Size

124KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

572KB

Virtual Size

576KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-26_6c32fd81f6ecaf1d03029af2bbdaf0fc_akira_cobalt-strike_icedid_njrat_satacom_vidar

advapi32

gdiplus

gdi32

kernel32

user32

oleaut32

generic