General
- Target 2026-05-28_4dbb70735a82a645df7ad4691766955e_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 1.7MB
- Sample260528-bkhj3scw2n
- SHA256 841114e3df72afb8dbb5a67c6ce018d140c7d664f519c550bd1edc78bf38ea50
- MD5 4dbb70735a82a645df7ad4691766955e
- SHA1 b3f07f417990327c0f290f6102289c7a9137cb5b
- SHA512 285d4645ce67d167d8bed9b6957f4cdf7ef1b450f1f066b9a6b6f2d543a4787e35f3920eb738820560a56a31818ee1902ff60ec93e7b89f6560e168bae1cf3fd
- SSDEEP 24576:G2cwidkAJ29u1eMDqjywE46ir9CJs/qKp4jQ:G2cwfW/1vu+o6ir9isIj
- TLSH T12E8519257B4E99A8C15AC474834A8A665A3174CB0B35B9FF21CC45782FAEBF42F3C354
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-28_4dbb70735a82a645df7ad4691766955e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_4dbb70735a82a645df7ad4691766955e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_4dbb70735a82a645df7ad4691766955e_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 1.7MB
- SHA256 841114e3df72afb8dbb5a67c6ce018d140c7d664f519c550bd1edc78bf38ea50
- MD5 4dbb70735a82a645df7ad4691766955e
- SHA1 b3f07f417990327c0f290f6102289c7a9137cb5b
- SHA512 285d4645ce67d167d8bed9b6957f4cdf7ef1b450f1f066b9a6b6f2d543a4787e35f3920eb738820560a56a31818ee1902ff60ec93e7b89f6560e168bae1cf3fd
- SSDEEP 24576:G2cwidkAJ29u1eMDqjywE46ir9CJs/qKp4jQ:G2cwfW/1vu+o6ir9isIj
- TLSH T12E8519257B4E99A8C15AC474834A8A665A3174CB0B35B9FF21CC45782FAEBF42F3C354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.