General
- Target 2026-07-08_713da1f3e064e790885e69b2b8c60903_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 1.8MB
- Sample260708-2bvq6aay71
- SHA256 7b5862065cb4d2675e27cb421c809265f9520d9956b992c16f27670ea582aaa1
- MD5 713da1f3e064e790885e69b2b8c60903
- SHA1 2082638c69b0f490a1b69fd4a7182d3a98490ffe
- SHA512 89a2432ec18f583e15e23a0f570b1b955f76612aa873d2e982d7f9aa426b6a48c04b6d5bd0601a13bfc7ae329a027f59c53455ecdfea09de68396a211a332cba
- SSDEEP 24576:0Hnqwa4VjxHTo8Ke8gYWFx5kbEUuD7KDoH3QDm9HOpjKlo8HIJ:0HFa4VdTge8gYWFxe1kKDoHAi9HIjKu
- TLSH T104852A027E5A9CA9C199C874C3468BA74E2234DF0A36B5FF41C915293F7EAB51F2D318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_713da1f3e064e790885e69b2b8c60903_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_713da1f3e064e790885e69b2b8c60903_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_713da1f3e064e790885e69b2b8c60903_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 1.8MB
- SHA256 7b5862065cb4d2675e27cb421c809265f9520d9956b992c16f27670ea582aaa1
- MD5 713da1f3e064e790885e69b2b8c60903
- SHA1 2082638c69b0f490a1b69fd4a7182d3a98490ffe
- SHA512 89a2432ec18f583e15e23a0f570b1b955f76612aa873d2e982d7f9aa426b6a48c04b6d5bd0601a13bfc7ae329a027f59c53455ecdfea09de68396a211a332cba
- SSDEEP 24576:0Hnqwa4VjxHTo8Ke8gYWFx5kbEUuD7KDoH3QDm9HOpjKlo8HIJ:0HFa4VdTge8gYWFxe1kKDoHAi9HIjKu
- TLSH T104852A027E5A9CA9C199C874C3468BA74E2234DF0A36B5FF41C915293F7EAB51F2D318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.