General
- Target 2026-10-28_9b3f4e2d3c6c6d1d70f628071a0b6dd1_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 5.4MB
- Sample261029-2qphpafv3z
- SHA256 fd06d949d6ed4fb07712a96555ccc6a606c2040070ac3b61d54dc7ec55823e04
- MD5 9b3f4e2d3c6c6d1d70f628071a0b6dd1
- SHA1 89e1dd7fe8b44d76689fdd86b529dd79e2ac1bdb
- SHA512 9800e14d5f52d6c58559f8b46ab9aeab88b8d759ef07069422b7781545eb2d0d5de2547ddd26ed3e0ce4c35ca0d0eaacb262a2f6f76fc1e87ffccdd19f2a9fed
- SSDEEP 98304:vOo8NN+bClr/fRpm1WqaJVqRIngw7mLQuw:vOo8NxHro/EAWnGLQu
- TLSH T1DC466C53A36610B8D46FC9B4CE29552296253C8E07F496FF22D47AF51A32ED43B38F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_9b3f4e2d3c6c6d1d70f628071a0b6dd1_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_9b3f4e2d3c6c6d1d70f628071a0b6dd1_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar
- Size 5.4MB
- SHA256 fd06d949d6ed4fb07712a96555ccc6a606c2040070ac3b61d54dc7ec55823e04
- MD5 9b3f4e2d3c6c6d1d70f628071a0b6dd1
- SHA1 89e1dd7fe8b44d76689fdd86b529dd79e2ac1bdb
- SHA512 9800e14d5f52d6c58559f8b46ab9aeab88b8d759ef07069422b7781545eb2d0d5de2547ddd26ed3e0ce4c35ca0d0eaacb262a2f6f76fc1e87ffccdd19f2a9fed
- SSDEEP 98304:vOo8NN+bClr/fRpm1WqaJVqRIngw7mLQuw:vOo8NxHro/EAWnGLQu
- TLSH T1DC466C53A36610B8D46FC9B4CE29552296253C8E07F496FF22D47AF51A32ED43B38F21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1