General
- Target 2026-05-03_7c4c2466ca750d89a898d57c143d0c69_akira_cobalt-strike_rusty-stealer_satacom
- Size 2.4MB
- Sample260503-k41pfaev2w
- SHA256 0b061b8c95484ee0631a198c74183a76bdb2a908d19e71f95e191e018a076642
- MD5 7c4c2466ca750d89a898d57c143d0c69
- SHA1 20a0e9aee51e3b7849d83d2d0f362ed3d7d32484
- SHA512 460842db815ebb11393112a3a58f7c51d13ba5b68793f80ad49a42b9cfbd988913ce06f1523409897cf7a88072129fe1f20e49dd50125fb7531787137a125d93
- SSDEEP 24576:2mccyD97CUotB0TTn+L3L/2oAfNs4cpTYUi0yy00bfkc3u70gsd7djF1X:2mDyQCX+L6oA1Hc700b8ceAvd7Z/
- TLSH T10EB5D09952C35167C3D39077E9729251263E7C9A1346304378FFE22C54A82E5E3FBACA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-03_7c4c2466ca750d89a898d57c143d0c69_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-03_7c4c2466ca750d89a898d57c143d0c69_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-03_7c4c2466ca750d89a898d57c143d0c69_akira_cobalt-strike_rusty-stealer_satacom
- Size 2.4MB
- SHA256 0b061b8c95484ee0631a198c74183a76bdb2a908d19e71f95e191e018a076642
- MD5 7c4c2466ca750d89a898d57c143d0c69
- SHA1 20a0e9aee51e3b7849d83d2d0f362ed3d7d32484
- SHA512 460842db815ebb11393112a3a58f7c51d13ba5b68793f80ad49a42b9cfbd988913ce06f1523409897cf7a88072129fe1f20e49dd50125fb7531787137a125d93
- SSDEEP 24576:2mccyD97CUotB0TTn+L3L/2oAfNs4cpTYUi0yy00bfkc3u70gsd7djF1X:2mDyQCX+L6oA1Hc700b8ceAvd7Z/
- TLSH T10EB5D09952C35167C3D39077E9729251263E7C9A1346304378FFE22C54A82E5E3FBACA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application