General
- Target 2026-06-30_02b04eaea9cc56ba92fcea16ef56ad8b_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 1.7MB
- Sample260701-hfh4daav4y
- SHA256 095085231f992f0a7ed95d39a3470f4b4846298083f59396767c5d938d6652f1
- MD5 02b04eaea9cc56ba92fcea16ef56ad8b
- SHA1 b23a47021d9d77bc4c7827e095c1a604325a85a9
- SHA512 1162e2046af13750cc52e3ff36eee67a378705fd6efc25e115ae82db544b7c87aab921d258763b40fb2fafa8fb24d39d7be5ac5d6309d4bba86b9e121d8762ec
- SSDEEP 24576:4Aij5UHJ229McSOxbuaWa0a9qaG/Ar82vMnV:4A6229cLAFDa9q5Yr8d
- TLSH T1218519257B5E99ACC15AC474834A8A665A3570CB0B35B8FF21CC45782FAEAF52F3C314
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_02b04eaea9cc56ba92fcea16ef56ad8b_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_02b04eaea9cc56ba92fcea16ef56ad8b_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_02b04eaea9cc56ba92fcea16ef56ad8b_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 1.7MB
- SHA256 095085231f992f0a7ed95d39a3470f4b4846298083f59396767c5d938d6652f1
- MD5 02b04eaea9cc56ba92fcea16ef56ad8b
- SHA1 b23a47021d9d77bc4c7827e095c1a604325a85a9
- SHA512 1162e2046af13750cc52e3ff36eee67a378705fd6efc25e115ae82db544b7c87aab921d258763b40fb2fafa8fb24d39d7be5ac5d6309d4bba86b9e121d8762ec
- SSDEEP 24576:4Aij5UHJ229McSOxbuaWa0a9qaG/Ar82vMnV:4A6229cLAFDa9q5Yr8d
- TLSH T1218519257B5E99ACC15AC474834A8A665A3570CB0B35B8FF21CC45782FAEAF52F3C314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.