General
- Target 2026-07-08_0638e68dc883f43425e988f3a247f812_akira_cobalt-strike_rusty-stealer_satacom
- Size 139KB
- Sample260708-2m4s7sa19y
- SHA256 7149542007703336e2b33a9882f574166fce315ced8f45d9170dc1ff365f2da0
- MD5 0638e68dc883f43425e988f3a247f812
- SHA1 801289cff5a039d9b2595c80ce8cac865b74cc9c
- SHA512 f7f290ad6878b2eb817460cc533eb050cf7f5ab105b1e7680737802a990c42ef62cfa4bf4e4951edb268554fc41f670a90d139565450c33d8cb4ad655dcfd8e5
- SSDEEP 1536:dje14WEtUD0nuQpIXdY/UQQnlm4AiJAAfEC9YhQEoNC5RrN66eGE0YyAS:djeCFU0UX44lBJrECvI53+n0Yl
- TLSH T1FDD35C23754164FDD45AC034831589E2B772B0D61F376AFF1AA942382FA99F66F3C224
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_0638e68dc883f43425e988f3a247f812_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_0638e68dc883f43425e988f3a247f812_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_0638e68dc883f43425e988f3a247f812_akira_cobalt-strike_rusty-stealer_satacom
- Size 139KB
- SHA256 7149542007703336e2b33a9882f574166fce315ced8f45d9170dc1ff365f2da0
- MD5 0638e68dc883f43425e988f3a247f812
- SHA1 801289cff5a039d9b2595c80ce8cac865b74cc9c
- SHA512 f7f290ad6878b2eb817460cc533eb050cf7f5ab105b1e7680737802a990c42ef62cfa4bf4e4951edb268554fc41f670a90d139565450c33d8cb4ad655dcfd8e5
- SSDEEP 1536:dje14WEtUD0nuQpIXdY/UQQnlm4AiJAAfEC9YhQEoNC5RrN66eGE0YyAS:djeCFU0UX44lBJrECvI53+n0Yl
- TLSH T1FDD35C23754164FDD45AC034831589E2B772B0D61F376AFF1AA942382FA99F66F3C224
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.