Analysis
- max time kernel
149s - max time network
139s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/11/2026, 23:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-31_85bc6540b9ed6825f76df0b2dc3da904_akira_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-31_85bc6540b9ed6825f76df0b2dc3da904_akira_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom_vidar.exe
- Size 9.2MB
- Sample261101-3crlkady21
- SHA256 263a8a6b404e2f2faedf9ef60cc42ff4e21deffddb941ee473d116d13d7eb785
- MD5 85bc6540b9ed6825f76df0b2dc3da904
- SHA1 1be07df861138daaa44de9e7638b52943acdc369
- SHA512 71016dc9149842e9f6e780f26e57ae92bc86897db6cbafa2b914937a4e5519c787435a8eda5ad32efe314b51f183d7237a7bc76917a18bc68bdb1f3a15d734ed
- SSDEEP 98304:k7BW8xv+cPy9AuDzYn2JjN5h2JjN5cNhS9Yw8y5:kTtPiDza21h21qwf5
- TLSH T1D4A64A12E6B484A9F42692308D3E9A219677BC635B3045CF1298FD1D2FF36C11B36B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4500 2026-10-31_85bc6540b9ed6825f76df0b2dc3da904_akira_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom_vidar.exe 4500 2026-10-31_85bc6540b9ed6825f76df0b2dc3da904_akira_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-31_85bc6540b9ed6825f76df0b2dc3da904_akira_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-31_85bc6540b9ed6825f76df0b2dc3da904_akira_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom_vidar.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:4500