General
- Target 2026-07-07_6a2eb83d85396cf8b2ca044a746d8e03_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 2.1MB
- Sample260708-bbkcbahx2q
- SHA256 ba1656422cea5d1dbf1d6b1d3c0d11c1a052f989d3ba1bbd6b3e8b5e4c7710de
- MD5 6a2eb83d85396cf8b2ca044a746d8e03
- SHA1 d2f026b4039f799c4985a70f3fde8f8a152c498d
- SHA512 9d963046775149c4ee2595ca0ca491342e19a067e48a11cc42bcc9515815cb65a595aac9f8d6b8d9f375b81ec60a3f52974e637dfd84aaf7c642f4f04907175d
- SSDEEP 49152:ZBCN22N9LHuTAKZaiWU8WMGrs6kXCfHcZNN/u1nXTX2:6RUHM/8jhou1nXTG
- TLSH T188A5AE23E75854EAE026C135C9530723EB72B4871731D6DF26D81A292F93BA01F3EB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_6a2eb83d85396cf8b2ca044a746d8e03_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_6a2eb83d85396cf8b2ca044a746d8e03_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_6a2eb83d85396cf8b2ca044a746d8e03_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 2.1MB
- SHA256 ba1656422cea5d1dbf1d6b1d3c0d11c1a052f989d3ba1bbd6b3e8b5e4c7710de
- MD5 6a2eb83d85396cf8b2ca044a746d8e03
- SHA1 d2f026b4039f799c4985a70f3fde8f8a152c498d
- SHA512 9d963046775149c4ee2595ca0ca491342e19a067e48a11cc42bcc9515815cb65a595aac9f8d6b8d9f375b81ec60a3f52974e637dfd84aaf7c642f4f04907175d
- SSDEEP 49152:ZBCN22N9LHuTAKZaiWU8WMGrs6kXCfHcZNN/u1nXTX2:6RUHM/8jhou1nXTG
- TLSH T188A5AE23E75854EAE026C135C9530723EB72B4871731D6DF26D81A292F93BA01F3EB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.