Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/07/2026, 16:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_fab1c72092257214cd5db051f7561577_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_fab1c72092257214cd5db051f7561577_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
1 signatures
150 seconds
General
- Target 2026-07-02_fab1c72092257214cd5db051f7561577_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
- Size 2.9MB
- Sample260702-thcvxset6n
- SHA256 05cba94cec5e32e4f7bfe5f520eebc6ee2e1369c2a994acb64ce8df20d33dd15
- MD5 fab1c72092257214cd5db051f7561577
- SHA1 56c6abf42267ec3a5e2563517bf8194a0ffa7eaf
- SHA512 b53020f1f2d2ab63b78fd6342bfce844c6192de793d0fb365f233796a1fddc1283ee3461bf380072a581efa59edacb658e89d9fc8e0e204b5100980ceb33ffa0
- SSDEEP 49152:g4e5qjzCPGCdrFSypzatZygstu1cG5Pw9ztG3/xLvEI:h0YEXs/xI
- TLSH T15FE517217A4A99EDC54AC07483468A72693230DB0F35BAFF44C496793F7AAF51F3C258
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 3 discord.com 4 discord.com