General
- Target 2026-07-05_34563c23fa6044cea2bb9a06167d6acb_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 229KB
- Sample260705-mc4ywsby6w
- SHA256 6cce4ea59a49512bf3836ca4b5fe0c6f4f951723cdcf09020e5f94313338dbe0
- MD5 34563c23fa6044cea2bb9a06167d6acb
- SHA1 fc183774af556a12b194e34025790c7d98c5393b
- SHA512 9ca0f16996cb23718d58031cbd63512f3669d5f41166fbd76a984879e98ba61abe58c0bfc31143620a53f8659bdbb11842c0fe7498a6765e1de69d1c612d45cf
- SSDEEP 3072:CrHT0xAvsyH47mPRvrOGYp3QS0bxPM03akuMTJkQj4cXxOt8eGoSm:CrHT0xAUO5vSGC3QSk3/fTJkQwNGxm
- TLSH T117348D1637915DF8E467C039C2514A55EA33B8850B21DAFF03A44239FF67AE29E3DB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_34563c23fa6044cea2bb9a06167d6acb_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_34563c23fa6044cea2bb9a06167d6acb_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_34563c23fa6044cea2bb9a06167d6acb_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 229KB
- SHA256 6cce4ea59a49512bf3836ca4b5fe0c6f4f951723cdcf09020e5f94313338dbe0
- MD5 34563c23fa6044cea2bb9a06167d6acb
- SHA1 fc183774af556a12b194e34025790c7d98c5393b
- SHA512 9ca0f16996cb23718d58031cbd63512f3669d5f41166fbd76a984879e98ba61abe58c0bfc31143620a53f8659bdbb11842c0fe7498a6765e1de69d1c612d45cf
- SSDEEP 3072:CrHT0xAvsyH47mPRvrOGYp3QS0bxPM03akuMTJkQj4cXxOt8eGoSm:CrHT0xAUO5vSGC3QSk3/fTJkQwNGxm
- TLSH T117348D1637915DF8E467C039C2514A55EA33B8850B21DAFF03A44239FF67AE29E3DB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.