General
- Target 2026-07-04_4005a31d63057ab109dd9d6a5c4067e6_akira_cobalt-strike_rusty-stealer_satacom
- Size 1.2MB
- Sample260704-xtcwvacv2v
- SHA256 d349d3139c02f65cdafd8210ddc3af1d4e6a849dd4c87b1c3d4dd620caa96205
- MD5 4005a31d63057ab109dd9d6a5c4067e6
- SHA1 cd0cefae27c2ece2f8f36392a7b20523f146322d
- SHA512 d00708b8eed35c625ad695ba141ecc0fa9af7f5427f9733b31404487334ed7fb104d650376b9a5d675043eb789f5726f320b7fa0bca3e282b87239dc1937fe29
- SSDEEP 24576:52YtgCef41+HU6/JX0ZcB4qgQxovXnueWNUscYpa1Wws3KNhbO0dZuHew2Ava31V:52Ytuf41+0WVKvtGEn
- TLSH T123555C03FF864AE9C8DCC4B08A7647660B26F4CA0F21A79F479815213E5BBB45F9D358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_4005a31d63057ab109dd9d6a5c4067e6_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_4005a31d63057ab109dd9d6a5c4067e6_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_4005a31d63057ab109dd9d6a5c4067e6_akira_cobalt-strike_rusty-stealer_satacom
- Size 1.2MB
- SHA256 d349d3139c02f65cdafd8210ddc3af1d4e6a849dd4c87b1c3d4dd620caa96205
- MD5 4005a31d63057ab109dd9d6a5c4067e6
- SHA1 cd0cefae27c2ece2f8f36392a7b20523f146322d
- SHA512 d00708b8eed35c625ad695ba141ecc0fa9af7f5427f9733b31404487334ed7fb104d650376b9a5d675043eb789f5726f320b7fa0bca3e282b87239dc1937fe29
- SSDEEP 24576:52YtgCef41+HU6/JX0ZcB4qgQxovXnueWNUscYpa1Wws3KNhbO0dZuHew2Ava31V:52Ytuf41+0WVKvtGEn
- TLSH T123555C03FF864AE9C8DCC4B08A7647660B26F4CA0F21A79F479815213E5BBB45F9D358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.