General
- Target 2026-05-18_a80fd9e6e8da746e0a01a575784c3d4b_akira_cobalt-strike_glassworm_rusty-stealer_satacom_vidar_zxxz
- Size 24.2MB
- Sample260518-e7ecqabw8j
- SHA256 fade3df068de993728fb4038e6c52aab6a825c0f2cf59ee36684c3357fda1016
- MD5 a80fd9e6e8da746e0a01a575784c3d4b
- SHA1 a3d66c35e7ef8ce3d5f30b5d4607efeae3700f6c
- SHA512 a21913a088e609fb498637b410db9ba767e1263906cfa5942381092bfe8f258f6680d5c7acc21278fa0d41c204a5f9c1b350907e12715553f1b4aff459261be8
- SSDEEP 196608:CtbWggGyxiC3iERHinXssXIYXVTiaysZIwERqO5LdIzHfscuwSK:R4AvyQycZaysZIFqO5LdIjUjwSK
- TLSH T110477D03F6A280E8D06EC5B5835BAA33E772B88D493472AF1BD45F212F59F506B1C359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-18_a80fd9e6e8da746e0a01a575784c3d4b_akira_cobalt-strike_glassworm_rusty-stealer_satacom_vidar_zxxz.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-18_a80fd9e6e8da746e0a01a575784c3d4b_akira_cobalt-strike_glassworm_rusty-stealer_satacom_vidar_zxxz.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-18_a80fd9e6e8da746e0a01a575784c3d4b_akira_cobalt-strike_glassworm_rusty-stealer_satacom_vidar_zxxz
- Size 24.2MB
- SHA256 fade3df068de993728fb4038e6c52aab6a825c0f2cf59ee36684c3357fda1016
- MD5 a80fd9e6e8da746e0a01a575784c3d4b
- SHA1 a3d66c35e7ef8ce3d5f30b5d4607efeae3700f6c
- SHA512 a21913a088e609fb498637b410db9ba767e1263906cfa5942381092bfe8f258f6680d5c7acc21278fa0d41c204a5f9c1b350907e12715553f1b4aff459261be8
- SSDEEP 196608:CtbWggGyxiC3iERHinXssXIYXVTiaysZIwERqO5LdIzHfscuwSK:R4AvyQycZaysZIFqO5LdIjUjwSK
- TLSH T110477D03F6A280E8D06EC5B5835BAA33E772B88D493472AF1BD45F212F59F506B1C359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.