General
- Target 2026-07-05_1dde6d1dda1a5b9f9531e79f25bf5fb7_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 298KB
- Sample260705-b9ff1sb18l
- SHA256 097abead50e812dd7561d4edc4dce182b2eb1a9f95886e9d0ca31455776c9b7f
- MD5 1dde6d1dda1a5b9f9531e79f25bf5fb7
- SHA1 f1e34650004ce3609a28a57f6f4374dac897a97d
- SHA512 8447aeb480fa9fb62988d9dd0d91a8eb7769572375c095dee8e60183386d8915e1a61ad822ada1a0be049a79dcdb99a970865641a8bc99c69e971219614422e2
- SSDEEP 6144:UneQb4OAhTKRlXDQN5wXSwie9nzwgEUE9p17qz50XjgeeYzgwG0gq83HNTDlWUWh:Ueo4YXDhEZP4YFGa
- TLSH T19E543B25BA56A4ACD55BC07883468A726971B4CA1B31B9FF02C441383FAEEF52F3C754
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_1dde6d1dda1a5b9f9531e79f25bf5fb7_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_1dde6d1dda1a5b9f9531e79f25bf5fb7_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_1dde6d1dda1a5b9f9531e79f25bf5fb7_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 298KB
- SHA256 097abead50e812dd7561d4edc4dce182b2eb1a9f95886e9d0ca31455776c9b7f
- MD5 1dde6d1dda1a5b9f9531e79f25bf5fb7
- SHA1 f1e34650004ce3609a28a57f6f4374dac897a97d
- SHA512 8447aeb480fa9fb62988d9dd0d91a8eb7769572375c095dee8e60183386d8915e1a61ad822ada1a0be049a79dcdb99a970865641a8bc99c69e971219614422e2
- SSDEEP 6144:UneQb4OAhTKRlXDQN5wXSwie9nzwgEUE9p17qz50XjgeeYzgwG0gq83HNTDlWUWh:Ueo4YXDhEZP4YFGa
- TLSH T19E543B25BA56A4ACD55BC07883468A726971B4CA1B31B9FF02C441383FAEEF52F3C754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.