54550c9a7354a83a939addbfa16f2e931ae9cfe932888e155a752cb3a689d634

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/06/2026, 23:06

Target
2026-06-25_373440d2f812c8e89c1ed03b6acaef58_akira_cobalt-strike_rusty-stealer_satacom.exe
Size 2.0MB
Sample260629-23lbssht7w
SHA256 54550c9a7354a83a939addbfa16f2e931ae9cfe932888e155a752cb3a689d634
MD5 373440d2f812c8e89c1ed03b6acaef58
SHA1 30c22fdcbc546b0dd47f2a001b5505dbfe77f525
SHA512 b0c8a49173a363561c8f59be430b6381846e5182396a7fb167fd8b63d36b8386d95a5f1ea6a944ef9f84e795a3c290815f0d47ddcbf283896e4ff2b4d0ac95b7
SSDEEP 49152:m35e/JMtMqAfyk41ZAbkK0Ile7hGoBrOw6afq:Ic/+tMqAf741ZslohGob6ai
TLSH
T172A523A9BE8196EDD54BC035C386C5B5763A70CD1F10BDFF12A412682E2DEF12E78216
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3156 wrote to memory of 3808	3156	2026-06-25_373440d2f812c8e89c1ed03b6acaef58_akira_cobalt-strike_rusty-stealer_satacom.exe	87
PID 3156 wrote to memory of 3808	3156	2026-06-25_373440d2f812c8e89c1ed03b6acaef58_akira_cobalt-strike_rusty-stealer_satacom.exe	87

C:\Users\Admin\AppData\Local\Temp\2026-06-25_373440d2f812c8e89c1ed03b6acaef58_akira_cobalt-strike_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-25_373440d2f812c8e89c1ed03b6acaef58_akira_cobalt-strike_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe"
  2⤵
  PID:3808

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:572

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3488