General
- Target 2026-06-30_0a413fa7ca09bc3d030e47a5eef54cfa_akira_cobalt-strike_rusty-stealer_satacom
- Size 620KB
- Sample260701-a855lsbx6k
- SHA256 de2aaaee098e902a77238092a16d473dd1f38999efb74eaf4d6d3756b3e2dedb
- MD5 0a413fa7ca09bc3d030e47a5eef54cfa
- SHA1 4896b63879680864106f5e6291b348ca71a9862a
- SHA512 180f0c059a5eb7147416e938f874158f71eb7e1003f087f672ea54fbb43655e7594ad8e94955abf35b4c7288063d39c579782e983cfc8008248aebaca756c62d
- SSDEEP 12288:l5AKNaOMJlIk6mOMQtTEJgTodvbi2Lu8jJZm2RFTKVd:l5XMJxqXM6owD2Zm2Rsd
- TLSH T1C8D40213FAC580A8D02AC076E1494AF6E67630890F356BEF079546243FAAFF94F39754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_0a413fa7ca09bc3d030e47a5eef54cfa_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_0a413fa7ca09bc3d030e47a5eef54cfa_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_0a413fa7ca09bc3d030e47a5eef54cfa_akira_cobalt-strike_rusty-stealer_satacom
- Size 620KB
- SHA256 de2aaaee098e902a77238092a16d473dd1f38999efb74eaf4d6d3756b3e2dedb
- MD5 0a413fa7ca09bc3d030e47a5eef54cfa
- SHA1 4896b63879680864106f5e6291b348ca71a9862a
- SHA512 180f0c059a5eb7147416e938f874158f71eb7e1003f087f672ea54fbb43655e7594ad8e94955abf35b4c7288063d39c579782e983cfc8008248aebaca756c62d
- SSDEEP 12288:l5AKNaOMJlIk6mOMQtTEJgTodvbi2Lu8jJZm2RFTKVd:l5XMJxqXM6owD2Zm2Rsd
- TLSH T1C8D40213FAC580A8D02AC076E1494AF6E67630890F356BEF079546243FAAFF94F39754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE