General
- Target 2026-06-28_3487c29e670859d29f4747f5a2b5c2b0_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 9.8MB
- Sample260628-3e4nxahs3p
- SHA256 5faa64c60d1921c80db232b6103ee6006640cb4f1e9958217bb5b87052f5917c
- MD5 3487c29e670859d29f4747f5a2b5c2b0
- SHA1 eea957bd3febce8950c68248c8ed958e10bff398
- SHA512 070b02aa5a8a3c60fd04a53a487c93f713c002854df233e19c05ad6bf81c2fde6fb02368b06f240af7568ad7e7b22ab8a38e7e8651ecad630cad8df0280bf18e
- SSDEEP 196608:FGXbT3DKtNY304JJtaIcN9NwSwKRU3vcoox:A2No0CH8e1to
- TLSH T1F1A6BE07E35081E9C0AEC0B9835BA637EA32B8894735B1DF5BE44B112E16FD06B3D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_3487c29e670859d29f4747f5a2b5c2b0_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_3487c29e670859d29f4747f5a2b5c2b0_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260617-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_3487c29e670859d29f4747f5a2b5c2b0_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 9.8MB
- SHA256 5faa64c60d1921c80db232b6103ee6006640cb4f1e9958217bb5b87052f5917c
- MD5 3487c29e670859d29f4747f5a2b5c2b0
- SHA1 eea957bd3febce8950c68248c8ed958e10bff398
- SHA512 070b02aa5a8a3c60fd04a53a487c93f713c002854df233e19c05ad6bf81c2fde6fb02368b06f240af7568ad7e7b22ab8a38e7e8651ecad630cad8df0280bf18e
- SSDEEP 196608:FGXbT3DKtNY304JJtaIcN9NwSwKRU3vcoox:A2No0CH8e1to
- TLSH T1F1A6BE07E35081E9C0AEC0B9835BA637EA32B8894735B1DF5BE44B112E16FD06B3D759
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.