2026-11-01_8760fb30299edfe12beb76f4ecd0d91b_akira_cobalt-strike_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_8760fb30299edfe12beb76f4ecd0d91b_akira_cobalt-strike_satacom_vidar
Size 269KB
Sample261102-tahffabs6s
SHA256 4176ab5251c69f36bbffe96f093fec9c60c3942eadf878b662e424bce5464e41
MD5 8760fb30299edfe12beb76f4ecd0d91b
SHA1 59cc0acaf7fb27756ffbee7955036198411c4ce1
SHA512 53cb69333afb6e8dfbe6ead967ff4fb9a65afc093894002e1b3429fe8cea53bae61c50fb5afaa2cc1783005124110441bf8da1bbcb4f0a24b4b4b887e34586d4
SSDEEP 3072:TRlUM0yA3pv6wmQbJp9qbDXccZrJx7bjdGv/7XXVR86suZhfdBr1dLeUphVVfK5:TRlBXkMwQVG77fhfhdaUphVo
TLSH
T180445A27B6580DE8D96B927C899AC906E77278018761C7DF53E083275F13AE5BE3F201
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-11-01_8760fb30299edfe12beb76f4ecd0d91b_akira_cobalt-strike_satacom_vidar

.exe 269KB

2026-11-01_8760fb30299edfe12beb76f4ecd0d91b_akira_cobalt-strike_satacom_vidar

IMPHASH 0fe13c9a77d0e71000c40502038b88ed
SHA256 4176ab5251c69f36bbffe96f093fec9c60c3942eadf878b662e424bce5464e41
MD5 8760fb30299edfe12beb76f4ecd0d91b
SHA1 59cc0acaf7fb27756ffbee7955036198411c4ce1
SHA512 53cb69333afb6e8dfbe6ead967ff4fb9a65afc093894002e1b3429fe8cea53bae61c50fb5afaa2cc1783005124110441bf8da1bbcb4f0a24b4b4b887e34586d4
SSDEEP 3072:TRlUM0yA3pv6wmQbJp9qbDXccZrJx7bjdGv/7XXVR86suZhfdBr1dLeUphVVfK5:TRlBXkMwQVG77fhfhdaUphVo
TLSH
T180445A27B6580DE8D96B927C899AC906E77278018761C7DF53E083275F13AE5BE3F201
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

8f:fe:9e:6b:cf:90:60:54:3e:35:0c:0d:e7:a4:7e:4f:9c:e7:86:98:18:ce:2f:fa:d6:4e:5c:1f:63:64:a5:96

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shanghai Hypergryph Network Technology Co.\, Ltd.,O=Shanghai Hypergryph Network Technology Co.\, Ltd.,ST=shanghai,C=CN

Chains

Sep 13, 2026

CN=Shanghai Hypergryph Network Technology Co.\, Ltd.,O=Shanghai Hypergryph Network Technology Co.\, Ltd.,ST=shanghai,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Shanghai Hypergryph Network Technology Co.\, Ltd.,O=Shanghai Hypergryph Network Technology Co.\, Ltd.,ST=shanghai,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

33:d0:d3:92:b0:71:d3:f0:1c:76:35:7a:46:58:ff:3c:74:00:be:5f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Shanghai Hypergryph Network Technology Co.\, Ltd.,O=Shanghai Hypergryph Network Technology Co.\, Ltd.,ST=shanghai,C=CN

Chains

Sep 13, 2026

CN=Shanghai Hypergryph Network Technology Co.\, Ltd.,O=Shanghai Hypergryph Network Technology Co.\, Ltd.,ST=shanghai,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Shanghai Hypergryph Network Technology Co.\, Ltd.,O=Shanghai Hypergryph Network Technology Co.\, Ltd.,ST=shanghai,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

CN=Shanghai Hypergryph Network Technology Co.\, Ltd.,O=Shanghai Hypergryph Network Technology Co.\, Ltd.,ST=shanghai,C=CN

Serial Number

04:07:98:a3:23:d5:fc:90:9a:53:bc:38:89:33:78:f2

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 22, 2025 - Aug 16, 2027

Minor OS version

Major OS version

Entry point

165452

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\yangxiangxian\.conan\data\PlatformProcess\1.12.0\hypergryph\release\build\out\PlatformProcess\Release\PlatformProcess.pdb

shell32

CommandLineToArgvW

kernel32

GetModuleFileNameW GetModuleHandleExW WideCharToMultiByte GetCommandLineW CloseHandle SetUnhandledExceptionFilter SetErrorMode WaitForSingleObject Sleep GetCurrentThreadId OpenProcess LocalFree GetStdHandle GetLastError GetCurrentProcessId GetProcAddress LoadLibraryW SetDllDirectoryW GetDllDirectoryW GetDynamicTimeZoneInformation GetConsoleMode WriteConsoleA GetConsoleScreenBufferInfo SetConsoleTextAttribute LeaveCriticalSection QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetSystemTimeAsFileTime WriteFile InitializeSListHead InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind EnterCriticalSection

msvcp140

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z _Thrd_detach ?_Throw_C_error@std@@YAXH@Z ?_Throw_Cpp_error@std@@YAXH@Z _Xtime_get_ticks _Thrd_join _Thrd_id _Mtx_init_in_situ _Mtx_destroy_in_situ _Mtx_lock _Mtx_unlock _Cnd_destroy_in_situ _Cnd_signal ?_Xbad_alloc@std@@YAXXZ ?_Syserror_map@std@@YAPEBDH@Z ??0_Locinfo@std@@QEAA@PEBD@Z ??1_Locinfo@std@@QEAA@XZ ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ?_Getfalse@_Locinfo@std@@QEBAPEBDXZ ?_Gettrue@_Locinfo@std@@QEBAPEBDXZ ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ ??0facet@locale@std@@IEAA@_K@Z ??1facet@locale@std@@MEAA@XZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?id@?$numpunct@D@std@@2V0locale@2@A ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??Bid@locale@std@@QEAA_KXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?uncaught_exception@std@@YA_NXZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

shlwapi

PathFindFileNameW

vcruntime140

__current_exception_context __current_exception __C_specific_handler memchr memset _CxxThrowException memmove memcpy memcmp __std_terminate __std_exception_copy __std_exception_destroy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e _exit terminate _register_thread_local_exe_atexit_callback _set_app_type _crt_atexit _beginthreadex exit _seh_filter_exe _cexit _configure_narrow_argv _get_narrow_winmain_command_line _register_onexit_function _initialize_onexit_table _c_exit _invalid_parameter_noinfo_noreturn _initialize_narrow_environment _errno

api-ms-win-crt-string-l1-1-0

isdigit

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vfprintf __stdio_common_vsnprintf_s _set_fmode __p__commode

api-ms-win-crt-convert-l1-1-0

atoll

api-ms-win-crt-heap-l1-1-0

_callnewh malloc calloc _set_new_mode free

api-ms-win-crt-math-l1-1-0

_fdclass _ldclass ceilf __setusermatherr _dclass _dsign

api-ms-win-crt-time-l1-1-0

_gmtime64_s _localtime64_s strftime

api-ms-win-crt-locale-l1-1-0

localeconv _configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_8760fb30299edfe12beb76f4ecd0d91b_akira_cobalt-strike_satacom_vidar

shell32

kernel32

msvcp140

version

shlwapi

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic