General
- Target 2026-07-06_7b48c3ffc2d566de971972430c434eb4_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 7.9MB
- Sample260707-dasy6sdv9k
- SHA256 2e430027864c9fe73cc14fd3df4803a67cfffe4c394a9acf8dd26aa8bc108911
- MD5 7b48c3ffc2d566de971972430c434eb4
- SHA1 d021c4526f0a81d0caa6b1c07f0b621ffef61045
- SHA512 3529c9ed22d2e2937946ff5e18663bc632b4285c8725bd7ebeef301f6bcdb0446069be4cdc1fb4155728fe97751e1434529b27624f9055eaf8112490790cc2f2
- SSDEEP 98304:BRzqtFjRiSkQFpFy26E/51GDoyjg7IJFXCILFSv64n+OeY6:vKjRKBcsJFXCILFSTTD6
- TLSH T1B9867B4BF29083EDE06DC279A3BB5633AA22F8890960715A5BFC5AC13F55F205F0D716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-06_7b48c3ffc2d566de971972430c434eb4_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_7b48c3ffc2d566de971972430c434eb4_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_7b48c3ffc2d566de971972430c434eb4_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 7.9MB
- SHA256 2e430027864c9fe73cc14fd3df4803a67cfffe4c394a9acf8dd26aa8bc108911
- MD5 7b48c3ffc2d566de971972430c434eb4
- SHA1 d021c4526f0a81d0caa6b1c07f0b621ffef61045
- SHA512 3529c9ed22d2e2937946ff5e18663bc632b4285c8725bd7ebeef301f6bcdb0446069be4cdc1fb4155728fe97751e1434529b27624f9055eaf8112490790cc2f2
- SSDEEP 98304:BRzqtFjRiSkQFpFy26E/51GDoyjg7IJFXCILFSv64n+OeY6:vKjRKBcsJFXCILFSTTD6
- TLSH T1B9867B4BF29083EDE06DC279A3BB5633AA22F8890960715A5BFC5AC13F55F205F0D716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.