General
- Target 2026-07-03_3ebd8330abd21f2723ccb03c478856a4_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 21.7MB
- Sample260704-a249qsd19l
- SHA256 2dfffd4c0b0e76a56cda6e82297dfa5840d536f8cbe72e282937196a2d62df39
- MD5 3ebd8330abd21f2723ccb03c478856a4
- SHA1 aa77d892d8fd9bc6b0ee5164e4235770d32a085a
- SHA512 6708c93d867ac79d4128a6548876deccde31bed6a54346261032c3b3ba73965ede7dab5e3a923ee748d1c522c06781f50bd1832ff37187a236bf33da8d03da71
- SSDEEP 393216:1dM6B5ZbXjOaOL3T8KYDYEXhIEs6B+NJpKKx8BzjCW4qraD/gQQt6FDJBqK:NVj+fiHxdfuIz4qraDcMF3B
- TLSH T13B373362B79A0939F69AC038DA050AB1E5397CE94330A9DF9598703D7F78DF04B3D648
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_3ebd8330abd21f2723ccb03c478856a4_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_3ebd8330abd21f2723ccb03c478856a4_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_3ebd8330abd21f2723ccb03c478856a4_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 21.7MB
- SHA256 2dfffd4c0b0e76a56cda6e82297dfa5840d536f8cbe72e282937196a2d62df39
- MD5 3ebd8330abd21f2723ccb03c478856a4
- SHA1 aa77d892d8fd9bc6b0ee5164e4235770d32a085a
- SHA512 6708c93d867ac79d4128a6548876deccde31bed6a54346261032c3b3ba73965ede7dab5e3a923ee748d1c522c06781f50bd1832ff37187a236bf33da8d03da71
- SSDEEP 393216:1dM6B5ZbXjOaOL3T8KYDYEXhIEs6B+NJpKKx8BzjCW4qraD/gQQt6FDJBqK:NVj+fiHxdfuIz4qraDcMF3B
- TLSH T13B373362B79A0939F69AC038DA050AB1E5397CE94330A9DF9598703D7F78DF04B3D648
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL