General
- Target 2026-11-01_99a5c9866e096d2ac24feeb38b590ec2_akira_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar
- Size 2.7MB
- Sample261102-ra17faaw5s
- SHA256 a61802683b1272de764a4fe5aef53e0032818b0b9cfab9e60f3a47f3f7bbb609
- MD5 99a5c9866e096d2ac24feeb38b590ec2
- SHA1 896bf59ff896adb1a46b9156152ddad56858c125
- SHA512 e3d44979059328e0f6f42df25f54530c092507c7bb98d5b2d98bc7f343209cb8630818b8476ada1634414deae10adefa918ab519207682894c7e085caa93cad6
- SSDEEP 49152:DeksRNfuv0P/9QXRNqFsZOxc1isfayXKvITLc66OYZdx4cxRjxXI4b00MS1uoIRD:LsxENsoOxc1isCyXKvIcOYZdx4s1b0s7
- TLSH T175D59D13F29A10E8D06AD1B4C746A132F972BC490B3179EF0794B7252E77EE46B39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_99a5c9866e096d2ac24feeb38b590ec2_akira_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_99a5c9866e096d2ac24feeb38b590ec2_akira_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_vidar
- Size 2.7MB
- SHA256 a61802683b1272de764a4fe5aef53e0032818b0b9cfab9e60f3a47f3f7bbb609
- MD5 99a5c9866e096d2ac24feeb38b590ec2
- SHA1 896bf59ff896adb1a46b9156152ddad56858c125
- SHA512 e3d44979059328e0f6f42df25f54530c092507c7bb98d5b2d98bc7f343209cb8630818b8476ada1634414deae10adefa918ab519207682894c7e085caa93cad6
- SSDEEP 49152:DeksRNfuv0P/9QXRNqFsZOxc1isfayXKvITLc66OYZdx4cxRjxXI4b00MS1uoIRD:LsxENsoOxc1isCyXKvIcOYZdx4s1b0s7
- TLSH T175D59D13F29A10E8D06AD1B4C746A132F972BC490B3179EF0794B7252E77EE46B39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1