General
- Target 2026-07-06_844f1f2123f2899aa6e5faf07b8cbeff_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 8.1MB
- Sample260707-c3dvaadt3r
- SHA256 77351339577c6869e4f524817cda190bb5d8c6808c4f768ed531848a9af071d9
- MD5 844f1f2123f2899aa6e5faf07b8cbeff
- SHA1 2c5d2992198c97c45560bf65b805292dc0da0a73
- SHA512 e4e787db86e0993d3cdedec7beee9acf71550c8610d94414f6db68f2cf3fe2575e5720b17dd2dd7b25fdec3eddca3e177a8e643b282cfd464fd1e6910af0753b
- SSDEEP 98304:tU6Cogc2+5Zx54kXiiMYLKFyGx6AOysrKy8XClSB7n+SYVK:5gc4iMopvrKy8XClSBbQK
- TLSH T14A867C8BF29083EDD06DC179A3BB5633AA21F8880964719A5BFC5AC13F55F206F0D716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-06_844f1f2123f2899aa6e5faf07b8cbeff_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_844f1f2123f2899aa6e5faf07b8cbeff_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_844f1f2123f2899aa6e5faf07b8cbeff_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 8.1MB
- SHA256 77351339577c6869e4f524817cda190bb5d8c6808c4f768ed531848a9af071d9
- MD5 844f1f2123f2899aa6e5faf07b8cbeff
- SHA1 2c5d2992198c97c45560bf65b805292dc0da0a73
- SHA512 e4e787db86e0993d3cdedec7beee9acf71550c8610d94414f6db68f2cf3fe2575e5720b17dd2dd7b25fdec3eddca3e177a8e643b282cfd464fd1e6910af0753b
- SSDEEP 98304:tU6Cogc2+5Zx54kXiiMYLKFyGx6AOysrKy8XClSB7n+SYVK:5gc4iMopvrKy8XClSBbQK
- TLSH T14A867C8BF29083EDD06DC179A3BB5633AA21F8880964719A5BFC5AC13F55F206F0D716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.