General
- Target 2026-06-26_901b24169463846e0c7e35af0465b9e7_akira_cobalt-strike_glassworm_icedid_quasar-rat_rusty-stealer_satacom
- Size 25.6MB
- Sample260629-rcmf3agy4k
- SHA256 4035262380e54920b066f789c9df434f28d9b1a342b7df7d60fcdcd31f0f9d5a
- MD5 901b24169463846e0c7e35af0465b9e7
- SHA1 193b651ad65e000d022dcbb2c412db3187633a2b
- SHA512 f31916c0181855088307a91c44f040788bfceca68615ac450bd9bc1d54c458a19173d084d87ea69a2bc094a06a677549268e5f2d3daf0f26d0cd989e40c8fbaa
- SSDEEP 98304:hhfWw0JWhDz+JNNfqRiiiRgQ5MCFk+ftLyUwUNnQeKZvpeyLBycNcNlKLfH4iE+f:S8iJmRUB1aHZ9qEMiEO
- TLSH T10D47D72A6678949AD17BC0B8D2939F217E21709A07393FF745D0827A2F24EF96D3C714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_901b24169463846e0c7e35af0465b9e7_akira_cobalt-strike_glassworm_icedid_quasar-rat_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_901b24169463846e0c7e35af0465b9e7_akira_cobalt-strike_glassworm_icedid_quasar-rat_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_901b24169463846e0c7e35af0465b9e7_akira_cobalt-strike_glassworm_icedid_quasar-rat_rusty-stealer_satacom
- Size 25.6MB
- SHA256 4035262380e54920b066f789c9df434f28d9b1a342b7df7d60fcdcd31f0f9d5a
- MD5 901b24169463846e0c7e35af0465b9e7
- SHA1 193b651ad65e000d022dcbb2c412db3187633a2b
- SHA512 f31916c0181855088307a91c44f040788bfceca68615ac450bd9bc1d54c458a19173d084d87ea69a2bc094a06a677549268e5f2d3daf0f26d0cd989e40c8fbaa
- SSDEEP 98304:hhfWw0JWhDz+JNNfqRiiiRgQ5MCFk+ftLyUwUNnQeKZvpeyLBycNcNlKLfH4iE+f:S8iJmRUB1aHZ9qEMiEO
- TLSH T10D47D72A6678949AD17BC0B8D2939F217E21709A07393FF745D0827A2F24EF96D3C714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.