General
- Target 2026-07-06_23125ca826e439a01cb25b83327d1509_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 298KB
- Sample260707-k1vc9aev5v
- SHA256 f8cc6ffeaa86693efacad253d7de6279fa7b2c231ff03e7fef4515a98c7a103e
- MD5 23125ca826e439a01cb25b83327d1509
- SHA1 4d2b5617ca499beb49ac471806c20731abbe6758
- SHA512 99c9e4dd492bbf145b4778fe331ae11b5bac65f47bee19f3d15c12ddb0a05f9b468dba55876404519b61c1e4174fd35165c04572e186774a33ad91a47b3803a5
- SSDEEP 6144:UneQb4OAhTKRlXDQN5wXSwie9nzwgEUE9p17qz50XjgeeYzgwG0gq83HNTDlWUWv:Ueo4YXDhEZP4YFGM
- TLSH T1E0543B25BA56A4ACD55BC07883468A726971B4CA1B31B9FF02C441383FAEEF52F3C754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_23125ca826e439a01cb25b83327d1509_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_23125ca826e439a01cb25b83327d1509_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_23125ca826e439a01cb25b83327d1509_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 298KB
- SHA256 f8cc6ffeaa86693efacad253d7de6279fa7b2c231ff03e7fef4515a98c7a103e
- MD5 23125ca826e439a01cb25b83327d1509
- SHA1 4d2b5617ca499beb49ac471806c20731abbe6758
- SHA512 99c9e4dd492bbf145b4778fe331ae11b5bac65f47bee19f3d15c12ddb0a05f9b468dba55876404519b61c1e4174fd35165c04572e186774a33ad91a47b3803a5
- SSDEEP 6144:UneQb4OAhTKRlXDQN5wXSwie9nzwgEUE9p17qz50XjgeeYzgwG0gq83HNTDlWUWv:Ueo4YXDhEZP4YFGM
- TLSH T1E0543B25BA56A4ACD55BC07883468A726971B4CA1B31B9FF02C441383FAEEF52F3C754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.