General
- Target 2026-11-01_b206f006f71cf0a1ac7e0f96c7e7b2b2_akira_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 5.0MB
- Sample261102-njsd4svv9m
- SHA256 8aeba68746c0820b53786ddcf91f907b266a12375da2a96a1bbcf171aa9ea5f4
- MD5 b206f006f71cf0a1ac7e0f96c7e7b2b2
- SHA1 ab076ac2bc6fc719c2a3c5be538cf522ebfc23c5
- SHA512 51c6de4236c58643e5cdd4766c394e4bb72bbfa27cf1c4726393cd4a1c6162eb17ab89ef8f725c900cb29a85e0c029c96bc066823d98b4b884d9d7edc93c5d3f
- SSDEEP 49152:3iX15IJv/pKKCECpExtwDzS9MAvM6+kuXunb7Q97/tKJ+AaLLeNF7pahCtIbHgq7:TJ0Py9Mt/XuaK+FhC4hVv
- TLSH T197367B53A36511B8D46FC8B4CF29552296253C8A43F4A6FF26D876F51A32EC43B38F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_b206f006f71cf0a1ac7e0f96c7e7b2b2_akira_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_b206f006f71cf0a1ac7e0f96c7e7b2b2_akira_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 5.0MB
- SHA256 8aeba68746c0820b53786ddcf91f907b266a12375da2a96a1bbcf171aa9ea5f4
- MD5 b206f006f71cf0a1ac7e0f96c7e7b2b2
- SHA1 ab076ac2bc6fc719c2a3c5be538cf522ebfc23c5
- SHA512 51c6de4236c58643e5cdd4766c394e4bb72bbfa27cf1c4726393cd4a1c6162eb17ab89ef8f725c900cb29a85e0c029c96bc066823d98b4b884d9d7edc93c5d3f
- SSDEEP 49152:3iX15IJv/pKKCECpExtwDzS9MAvM6+kuXunb7Q97/tKJ+AaLLeNF7pahCtIbHgq7:TJ0Py9Mt/XuaK+FhC4hVv
- TLSH T197367B53A36511B8D46FC8B4CF29552296253C8A43F4A6FF26D876F51A32EC43B38F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1