General
- Target 2026-07-05_4f6b4da409412c676601aa84acc7fe04_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 25.9MB
- Sample260705-fxb1aadw2r
- SHA256 838a62d7ca0307d47a013978e36c27948f59bd23f9f130ce82696f4998bfc5c9
- MD5 4f6b4da409412c676601aa84acc7fe04
- SHA1 f3f3f9f222ec2cea3ee8b933f95ef780f12dce57
- SHA512 9c15e62466f2aa23fd6636cc192fdf11d8f9ebfe19f4a60dbeb7ba10a21b2acdcb4bac5349bb0274ec53a9111da60a0641c309292c7b66d8d172111c52843386
- SSDEEP 393216:Qyg6VDvpsLJhQrvIIPHQankiF0kBvQSpWHMr:Qyg6VDvpsLJhQrvIIPHQaniN1HM
- TLSH T134570721BA5B996CD09AC47483478A760A7130DB0B35B9FF44C496393F6DBF86F38219
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_4f6b4da409412c676601aa84acc7fe04_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_4f6b4da409412c676601aa84acc7fe04_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_4f6b4da409412c676601aa84acc7fe04_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 25.9MB
- SHA256 838a62d7ca0307d47a013978e36c27948f59bd23f9f130ce82696f4998bfc5c9
- MD5 4f6b4da409412c676601aa84acc7fe04
- SHA1 f3f3f9f222ec2cea3ee8b933f95ef780f12dce57
- SHA512 9c15e62466f2aa23fd6636cc192fdf11d8f9ebfe19f4a60dbeb7ba10a21b2acdcb4bac5349bb0274ec53a9111da60a0641c309292c7b66d8d172111c52843386
- SSDEEP 393216:Qyg6VDvpsLJhQrvIIPHQankiF0kBvQSpWHMr:Qyg6VDvpsLJhQrvIIPHQaniN1HM
- TLSH T134570721BA5B996CD09AC47483478A760A7130DB0B35B9FF44C496393F6DBF86F38219
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.