General
- Target 2026-07-01_4f89984d34c32550aad6a40747afb0d2_akira_cobalt-strike_rusty-stealer_satacom
- Size 623KB
- Sample260701-lv39msds8w
- SHA256 4ae3e12fcc1771c607d4614712883ba06dae358a819e8470eb181110c01c03d7
- MD5 4f89984d34c32550aad6a40747afb0d2
- SHA1 4b12113f1957aba16ff9c8869ed835a3c3abba24
- SHA512 2e4696078079de92c3cb2651999cab90c3b48f36eabbaa0413a11248bfe94bffe8965325386658331568527b9ea6ba2b5e3a8db7e6cfb11117adb2cbd2ebaa80
- SSDEEP 6144:zSkL3mhuEBjpDYWq5y4S7Vi679PfFrYULV7Kf0v4UlUVuQYjRVQZZ2LK7XIFajTd:DmhuiDa5y46zaU+ZWK7X96M8Va
- TLSH T117D41915BE4A29ACD55AC4B083468A736A3570CB1B32B9FF05C851393F6CAF91F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_4f89984d34c32550aad6a40747afb0d2_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_4f89984d34c32550aad6a40747afb0d2_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_4f89984d34c32550aad6a40747afb0d2_akira_cobalt-strike_rusty-stealer_satacom
- Size 623KB
- SHA256 4ae3e12fcc1771c607d4614712883ba06dae358a819e8470eb181110c01c03d7
- MD5 4f89984d34c32550aad6a40747afb0d2
- SHA1 4b12113f1957aba16ff9c8869ed835a3c3abba24
- SHA512 2e4696078079de92c3cb2651999cab90c3b48f36eabbaa0413a11248bfe94bffe8965325386658331568527b9ea6ba2b5e3a8db7e6cfb11117adb2cbd2ebaa80
- SSDEEP 6144:zSkL3mhuEBjpDYWq5y4S7Vi679PfFrYULV7Kf0v4UlUVuQYjRVQZZ2LK7XIFajTd:DmhuiDa5y46zaU+ZWK7X96M8Va
- TLSH T117D41915BE4A29ACD55AC4B083468A736A3570CB1B32B9FF05C851393F6CAF91F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.