General
- Target 2026-07-07_c1f02be5c8ebe410e4ae449c06b6c98c_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 2.1MB
- Sample260707-hydavab181
- SHA256 58f12e110aa4337d134d4a4613549991b2ecacf712413521bae78359022df2cc
- MD5 c1f02be5c8ebe410e4ae449c06b6c98c
- SHA1 d3565a769eeb5ea2bd1ae83f64099a22b69d03ec
- SHA512 22cec6c914b7be157fb5dad3d3c927414e7bc48083a9e10dc5012a518729bf09e0de9d1ac55a66dac591fa9c0a78753b944cf9628cbf3774762fe5adcd776f2d
- SSDEEP 49152:oRabkC5IwkRkLC7xOULB0a2iidX5uP+MJluXLXkuLD:TUxR6+nYWLuXLXkuLD
- TLSH T130A5AE23E75854EAE036C135CA530723EB72B447173196DF22D81E292F93BA01F7AB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_c1f02be5c8ebe410e4ae449c06b6c98c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_c1f02be5c8ebe410e4ae449c06b6c98c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_c1f02be5c8ebe410e4ae449c06b6c98c_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 2.1MB
- SHA256 58f12e110aa4337d134d4a4613549991b2ecacf712413521bae78359022df2cc
- MD5 c1f02be5c8ebe410e4ae449c06b6c98c
- SHA1 d3565a769eeb5ea2bd1ae83f64099a22b69d03ec
- SHA512 22cec6c914b7be157fb5dad3d3c927414e7bc48083a9e10dc5012a518729bf09e0de9d1ac55a66dac591fa9c0a78753b944cf9628cbf3774762fe5adcd776f2d
- SSDEEP 49152:oRabkC5IwkRkLC7xOULB0a2iidX5uP+MJluXLXkuLD:TUxR6+nYWLuXLXkuLD
- TLSH T130A5AE23E75854EAE036C135CA530723EB72B447173196DF22D81E292F93BA01F7AB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.