General
- Target 2026-06-26_377eebd6dc4dfd1402f30fb8db4c4ef5_akira_cobalt-strike_rusty-stealer_satacom
- Size 12.5MB
- Sample260629-ve263sh191
- SHA256 734f588b76c5300ed8b74e43cd13428b4753782e1bf0d77fc5980727a82df2b9
- MD5 377eebd6dc4dfd1402f30fb8db4c4ef5
- SHA1 653c70e156f8f8268fa6938fd08b9bc2d7ff443d
- SHA512 957662fab06d1c4f50a37e6f4428dc7ffa62f93dfb9c181f5ffea230b5fcb0d520d803d051ef779c15493ba48c6764d4d9a0db9e34d44e985036c81a87c245a2
- SSDEEP 98304:mQ6SMTCF3XuLQyNfZfONbop72deZNESVU:mQ5JMQyNfZtxU
- TLSH T1B9D6FA17A77960D9C17FC07892839F22BD21749947396BF38AD1826A1F20EF8AD7D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_377eebd6dc4dfd1402f30fb8db4c4ef5_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_377eebd6dc4dfd1402f30fb8db4c4ef5_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_377eebd6dc4dfd1402f30fb8db4c4ef5_akira_cobalt-strike_rusty-stealer_satacom
- Size 12.5MB
- SHA256 734f588b76c5300ed8b74e43cd13428b4753782e1bf0d77fc5980727a82df2b9
- MD5 377eebd6dc4dfd1402f30fb8db4c4ef5
- SHA1 653c70e156f8f8268fa6938fd08b9bc2d7ff443d
- SHA512 957662fab06d1c4f50a37e6f4428dc7ffa62f93dfb9c181f5ffea230b5fcb0d520d803d051ef779c15493ba48c6764d4d9a0db9e34d44e985036c81a87c245a2
- SSDEEP 98304:mQ6SMTCF3XuLQyNfZfONbop72deZNESVU:mQ5JMQyNfZtxU
- TLSH T1B9D6FA17A77960D9C17FC07892839F22BD21749947396BF38AD1826A1F20EF8AD7D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.