General
- Target 2026-07-05_9c5652e541d94a05b91f0e80ab956200_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 2.7MB
- Sample260705-bpy3mafz7z
- SHA256 953623e739ff5cf5d36cc0da3a82ddce4af111fc34d874efb76289c9385c50ad
- MD5 9c5652e541d94a05b91f0e80ab956200
- SHA1 bc0daf103b166add5c5bf2712d7c81be2ef392e0
- SHA512 fbdd6cede6c0b45db33d9e46573fe393b7ec11b1fab8e293f757d174781615805bf5a2fab11dc60ef4d87213a4248652a7d86c3377819979912b9d43f29ac156
- SSDEEP 49152:uPaBzlxkiVQyjPOWJCm4oOa88umm5BkFVcilcSbQ:uP7luIi
- TLSH T1ADD52A203B5A99ADC55EC074C2878AB26A7170CB0F34BAEF45D486783E79AF51F3C254
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_9c5652e541d94a05b91f0e80ab956200_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_9c5652e541d94a05b91f0e80ab956200_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_9c5652e541d94a05b91f0e80ab956200_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 2.7MB
- SHA256 953623e739ff5cf5d36cc0da3a82ddce4af111fc34d874efb76289c9385c50ad
- MD5 9c5652e541d94a05b91f0e80ab956200
- SHA1 bc0daf103b166add5c5bf2712d7c81be2ef392e0
- SHA512 fbdd6cede6c0b45db33d9e46573fe393b7ec11b1fab8e293f757d174781615805bf5a2fab11dc60ef4d87213a4248652a7d86c3377819979912b9d43f29ac156
- SSDEEP 49152:uPaBzlxkiVQyjPOWJCm4oOa88umm5BkFVcilcSbQ:uP7luIi
- TLSH T1ADD52A203B5A99ADC55EC074C2878AB26A7170CB0F34BAEF45D486783E79AF51F3C254
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.