2026-06-03_0b2a55a0b1b12c9b805df31f59b0fbf9_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-03_0b2a55a0b1b12c9b805df31f59b0fbf9_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 308KB
Sample260603-bbtwrag17j
SHA256 8d00c4441d3a9777b9db02f2516226a822a90aef084d7f5b6cbad1bbee90f1ec
MD5 0b2a55a0b1b12c9b805df31f59b0fbf9
SHA1 cc47078e99883733ce33cf9dcde30b9fbc7a93c6
SHA512 7f6b8e75165dc6a75fbe316de2c149fe35c6ab0770780cf51a7b9409ae4c849e4312f2cf9655789d6520cd41e2d9b17174b7e886cc8378a77e09b63115eafb7e
SSDEEP 3072:ickGqNe+F881MtOIBliRDRap3sYDo+56TAP/MtihALHBUfpE6Lct9XHEQHYjWZ0N:iLN5881BIU5B+56XtiIUf+p0Q41uq
TLSH
T173644C13F68458F8D45AC078874B5676AA37BC890B21B5EF17A436202F7AEE16F3C705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-03_0b2a55a0b1b12c9b805df31f59b0fbf9_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-06-03_0b2a55a0b1b12c9b805df31f59b0fbf9_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 308KB

2026-06-03_0b2a55a0b1b12c9b805df31f59b0fbf9_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 6da8564242778a23b5bce49e7f259cdd
SHA256 8d00c4441d3a9777b9db02f2516226a822a90aef084d7f5b6cbad1bbee90f1ec
MD5 0b2a55a0b1b12c9b805df31f59b0fbf9
SHA1 cc47078e99883733ce33cf9dcde30b9fbc7a93c6
SHA512 7f6b8e75165dc6a75fbe316de2c149fe35c6ab0770780cf51a7b9409ae4c849e4312f2cf9655789d6520cd41e2d9b17174b7e886cc8378a77e09b63115eafb7e
SSDEEP 3072:ickGqNe+F881MtOIBliRDRap3sYDo+56TAP/MtihALHBUfpE6Lct9XHEQHYjWZ0N:iLN5881BIU5B+56XtiIUf+p0Q41uq
TLSH
T173644C13F68458F8D45AC078874B5676AA37BC890B21B5EF17A436202F7AEE16F3C705
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

227872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

cannibal_side.pdb

bcryptprimitives

ProcessPrng

kernel32

SetFileInformationByHandle CloseHandle GetFileInformationByHandleEx FindClose GetFullPathNameW SetFileTime FindFirstFileExW SetLastError GetTempPathW CopyFileExW FindNextFileW GetLastError GetTimeZoneInformationForYear GetFileInformationByHandle FormatMessageW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter QueryPerformanceFrequency CreateDirectoryW CreateFileW GetModuleHandleA GetModuleHandleW GetEnvironmentVariableW HeapAlloc WriteConsoleW MultiByteToWideChar WaitForSingleObject GetConsoleOutputCP GetConsoleMode GetStdHandle GetCurrentDirectoryW RtlVirtualUnwind WideCharToMultiByte ReleaseMutex GetModuleFileNameW SwitchToThread AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetSystemTimePreciseAsFileTime GetCurrentThreadId RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW GetCurrentProcessId CreateMutexA

ntdll

NtWriteFile NtOpenFile RtlNtStatusToDosError NtReadFile

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

vcruntime140

memcpy memcmp __CxxFrameHandler3 memset __C_specific_handler memmove __current_exception_context __current_exception

api-ms-win-crt-runtime-l1-1-0

__p___argc _cexit _register_thread_local_exe_atexit_callback _initialize_onexit_table _register_onexit_function _crt_atexit terminate __p___argv _seh_filter_exe _set_app_type _c_exit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-03_0b2a55a0b1b12c9b805df31f59b0fbf9_akira_cobalt-strike_glassworm_rusty-stealer_satacom

bcryptprimitives

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic