3d59baea46715ba611f0fbb8ac54bac7e9bc3fe25e2bec9043a95f854ddd887f | Triage™

Login
Reports

Overview

overview

9

Static

static

3

2026-05-22...om.exe

windows10-2004-x64

9

2026-05-22...om.exe

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-22_2ce30b4535f7e54f0f9089e85ee45979_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 9.4MB
Sample260522-dnp5faf17v
SHA256 3d59baea46715ba611f0fbb8ac54bac7e9bc3fe25e2bec9043a95f854ddd887f
MD5 2ce30b4535f7e54f0f9089e85ee45979
SHA1 56a34f3ce3a40e3cb9486db779d9d3101c4a303d
SHA512 ae8a45b15ecd75b40764ffe7edfa7dfdbaf3d70d484283d89b1363ce5e02c8f82a6ab2dfe9f2174acb750d2c65078d5915dd79a7780de82611f1e8a6459ebdf0
SSDEEP 98304:Ujq4yr5Qg7aWOs8euDaqm8yd6x0/3eAexf6LxQBzx8r7YU4aYHi+Ho02uDpO:Se/i8dEa3zCC+/UnYHi+Ho
TLSH
T121A64947F66290ECC06AC175831A6232FA32BC4D47357AEB5BD04A213E66FD06B3DB54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-05-22_2ce30b4535f7e54f0f9089e85ee45979_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

defense_evasion discovery spyware stealer trojan

Behavioral task

behavioral2

Sample

2026-05-22_2ce30b4535f7e54f0f9089e85ee45979_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Resource

win11-20260513-en

windows11-21h2-x64

15 signatures

150 seconds

defense_evasion discovery spyware stealer trojan

Malware Config

Targets

- Target
  2026-05-22_2ce30b4535f7e54f0f9089e85ee45979_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 9.4MB
- SHA256 3d59baea46715ba611f0fbb8ac54bac7e9bc3fe25e2bec9043a95f854ddd887f
- MD5 2ce30b4535f7e54f0f9089e85ee45979
- SHA1 56a34f3ce3a40e3cb9486db779d9d3101c4a303d
- SHA512 ae8a45b15ecd75b40764ffe7edfa7dfdbaf3d70d484283d89b1363ce5e02c8f82a6ab2dfe9f2174acb750d2c65078d5915dd79a7780de82611f1e8a6459ebdf0
- SSDEEP 98304:Ujq4yr5Qg7aWOs8euDaqm8yd6x0/3eAexf6LxQBzx8r7YU4aYHi+Ho02uDpO:Se/i8dEa3zCC+/UnYHi+Ho
- TLSH
  T121A64947F66290ECC06AC175831A6232FA32BC4D47357AEB5BD04A213E66FD06B3DB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery spyware stealer trojan
- Enumerates VirtualBox registry keys
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Browser Information Discovery

Network Share Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryspywarestealertrojan

behavioral2

defense_evasiondiscoveryspywarestealertrojan

© 2018-2026

Terms | Privacy