2026-07-06_7ddbc1b1192e2666cb306858cc5b56d6_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_7ddbc1b1192e2666cb306858cc5b56d6_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 15.2MB
Sample260707-c8b8msdv3n
SHA256 3f20331559a01c0b39a2d0c64c55aecb3c5f707c4859de72492e897aaf1f0ed0
MD5 7ddbc1b1192e2666cb306858cc5b56d6
SHA1 048d4b9e3cd3cf710ba059b79d17f06ddd7678ee
SHA512 50087dd084f6932e4b039e3b18600ec69381b5ef11976bd35efb215dc0347674f67da21bc7fb838cfaf236e488b956c83d2378e6b88b7ff444b2a40419b52680
SSDEEP 98304:TeT6vj6SLQY3nn885HFkrXD1//we/Z1pVYPPBYjZCj4yuMIQH+S4/4NLbS2h4:hj5fYx/fx1fzZyuhWF1h4
TLSH
T138F619117A9F98ACD19AC8B0834A4A730E2134DB1A36B9BF44C455393F6DBF06F39719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_7ddbc1b1192e2666cb306858cc5b56d6_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-07-06_7ddbc1b1192e2666cb306858cc5b56d6_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 15.2MB

2026-07-06_7ddbc1b1192e2666cb306858cc5b56d6_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 904a6cb481b2fb7d172e83a86d5f5781
SHA256 3f20331559a01c0b39a2d0c64c55aecb3c5f707c4859de72492e897aaf1f0ed0
MD5 7ddbc1b1192e2666cb306858cc5b56d6
SHA1 048d4b9e3cd3cf710ba059b79d17f06ddd7678ee
SHA512 50087dd084f6932e4b039e3b18600ec69381b5ef11976bd35efb215dc0347674f67da21bc7fb838cfaf236e488b956c83d2378e6b88b7ff444b2a40419b52680
SSDEEP 98304:TeT6vj6SLQY3nn885HFkrXD1//we/Z1pVYPPBYjZCj4yuMIQH+S4/4NLbS2h4:hj5fYx/fx1fzZyuhWF1h4
TLSH
T138F619117A9F98ACD19AC8B0834A4A730E2134DB1A36B9BF44C455393F6DBF06F39719
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11271776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

tensorlake.pdb

kernel32

CancelIoEx GetFinalPathNameByHandleW SetLastError SetFileCompletionNotificationModes SetConsoleCursorPosition CreateIoCompletionPort GetCurrentThread SetConsoleTextAttribute FillConsoleOutputCharacterA GetQueuedCompletionStatusEx GetCurrentThreadId WaitForSingleObjectEx GetCurrentProcess CreateMutexA WideCharToMultiByte SetThreadStackGuarantee GetConsoleOutputCP GetConsoleScreenBufferInfo MultiByteToWideChar WriteConsoleW RegisterWaitForSingleObject ReadFileEx PostQueuedCompletionStatus UnregisterWaitEx SetHandleInformation GetOverlappedResult SetFileTime SetFileInformationByHandle FindFirstFileExW GetFileInformationByHandle SwitchToThread ReadConsoleW CreateDirectoryW ExitProcess WaitForMultipleObjects CreateEventW CancelIo TerminateProcess ReadFile GetFileInformationByHandleEx GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle ReadConsoleInputW GetTempPathW DeleteFileW MoveFileExW DeviceIoControl GetFileType SetConsoleCursorInfo GetConsoleCursorInfo SetFilePointerEx FindNextFileW SetConsoleCtrlHandler GetNumberOfConsoleInputEvents CreateFileW SetNamedPipeHandleState CreateThread SetConsoleMode GetConsoleMode GetFullPathNameW CopyFileExW FillConsoleOutputAttribute WriteFileEx GetProcessHeap HeapFree HeapReAlloc GetCommandLineW AddVectoredExceptionHandler CreateHardLinkW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetCurrentDirectoryW LoadLibraryA HeapAlloc GetEnvironmentVariableW QueryPerformanceFrequency GetModuleHandleW FormatMessageW QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameW FlushFileBuffers GetSystemTimePreciseAsFileTime GetCurrentProcessId FindClose lstrlenW CompareStringOrdinal GetSystemTimeAsFileTime GetSystemInfo GetExitCodeProcess WaitForSingleObject GetComputerNameExW GetStdHandle GetTimeZoneInformationForYear WriteFile GetSystemDirectoryW SleepEx InitializeSListHead GetProcAddress GetModuleHandleA Sleep GetLastError ReleaseMutex CloseHandle SetUnhandledExceptionFilter

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ws2_32

send socket WSASend WSACleanup recv WSAStartup WSAIoctl ioctlsocket freeaddrinfo getpeername getsockopt connect setsockopt accept getsockname listen bind WSAGetLastError shutdown WSASocketW closesocket getaddrinfo

shell32

SHGetKnownFolderPath

combase

CoTaskMemFree

ntdll

NtCancelIoFileEx RtlNtStatusToDosError NtDeviceIoControlFile NtCreateFile NtWriteFile NtReadFile NtOpenFile NtCreateNamedPipeFile

crypt32

CertAddEncodedCertificateToStore CertGetCertificateChain CertOpenStore CertVerifyCertificateChainPolicy CertFreeCertificateChain CertSetCertificateContextProperty CertCloseStore CertCreateCertificateChainEngine CertFreeCertificateContext CertFreeCertificateChainEngine

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

vcruntime140

memset __C_specific_handler __current_exception memcpy __CxxFrameHandler3 memcmp memmove _CxxThrowException __current_exception_context

api-ms-win-crt-math-l1-1-0

ceilf __setusermatherr fmod ceil trunc round pow floorf truncf log2

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_initterm_e exit _exit _initterm terminate __p___argc __p___argv _cexit _get_initial_narrow_environment _c_exit _seh_filter_exe _register_thread_local_exe_atexit_callback _initialize_narrow_environment _set_app_type _configure_narrow_argv _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_7ddbc1b1192e2666cb306858cc5b56d6_akira_cobalt-strike_glassworm_rusty-stealer_satacom

kernel32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

ws2_32

shell32

combase

ntdll

crypt32

bcrypt

advapi32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic