General
- Target 2026-11-02_f8b101ab08433a475281fc04052644dc_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 4.1MB
- Sample261102-wct85afg53
- SHA256 24979f48b2f2009ba9fa9a449da74a21229f9f06a7063b92da46adbf166fe6cb
- MD5 f8b101ab08433a475281fc04052644dc
- SHA1 984313dd7c9b8e3cf5224cb103202385481db5ff
- SHA512 fe0945ac5f7f42a697fbf2bbcd8ab08d0562519d50349cd53393b7733035c3d00d26547721e269bc009abca23fd77a40b9701af8203f9b57ce97266e72d1215c
- SSDEEP 49152:WM2Adq+iSBLecZGE78+vdhTCBaVGOGrJohW2AWBjlIyU1QqpN755XLNiXicJFFRI:WM3kcDGKjYOc517wRGpj3
- TLSH T12C166B1EB35841E8D5ABD5BD8A428506E271F801C73166CF26A4875E2FFB7E34E3A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_f8b101ab08433a475281fc04052644dc_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_f8b101ab08433a475281fc04052644dc_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 4.1MB
- SHA256 24979f48b2f2009ba9fa9a449da74a21229f9f06a7063b92da46adbf166fe6cb
- MD5 f8b101ab08433a475281fc04052644dc
- SHA1 984313dd7c9b8e3cf5224cb103202385481db5ff
- SHA512 fe0945ac5f7f42a697fbf2bbcd8ab08d0562519d50349cd53393b7733035c3d00d26547721e269bc009abca23fd77a40b9701af8203f9b57ce97266e72d1215c
- SSDEEP 49152:WM2Adq+iSBLecZGE78+vdhTCBaVGOGrJohW2AWBjlIyU1QqpN755XLNiXicJFFRI:WM3kcDGKjYOc517wRGpj3
- TLSH T12C166B1EB35841E8D5ABD5BD8A428506E271F801C73166CF26A4875E2FFB7E34E3A350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1