General
- Target 2026-07-08_b215d56641e7eece9e065ede53ea47b3_akira_cobalt-strike_rusty-stealer_satacom_vidar
- Size 10.5MB
- Sample260708-ev6w7sbt8n
- SHA256 9dbba0cab4de4a852cfde50e9d07acbb31d28178d98dbcbe1d5073e6780aaf04
- MD5 b215d56641e7eece9e065ede53ea47b3
- SHA1 27f5e1d32942df5185e1229a92e0441048128727
- SHA512 04e1d063abe86070bc4ac7fad7833b17b56d78db9a09a58e5a3ac48ffb460b602748f6cf5786ab94466275261276eee63f94d757979a24a9ff7f0991e6ef5eb9
- SSDEEP 98304:A7QykhdhaOQUPhVRf7d1bZMJz1tFsMBFOhCMZj3tZRRA5ijYaOFmzTkRKJjrcQoG:leUPld1bZMr3Itx3
- TLSH T1C7B6C4257A5B9A6CC15BC4B4834B4A66497130CF0B39B9FF449492382F6EBF42F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_b215d56641e7eece9e065ede53ea47b3_akira_cobalt-strike_rusty-stealer_satacom_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_b215d56641e7eece9e065ede53ea47b3_akira_cobalt-strike_rusty-stealer_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_b215d56641e7eece9e065ede53ea47b3_akira_cobalt-strike_rusty-stealer_satacom_vidar
- Size 10.5MB
- SHA256 9dbba0cab4de4a852cfde50e9d07acbb31d28178d98dbcbe1d5073e6780aaf04
- MD5 b215d56641e7eece9e065ede53ea47b3
- SHA1 27f5e1d32942df5185e1229a92e0441048128727
- SHA512 04e1d063abe86070bc4ac7fad7833b17b56d78db9a09a58e5a3ac48ffb460b602748f6cf5786ab94466275261276eee63f94d757979a24a9ff7f0991e6ef5eb9
- SSDEEP 98304:A7QykhdhaOQUPhVRf7d1bZMJz1tFsMBFOhCMZj3tZRRA5ijYaOFmzTkRKJjrcQoG:leUPld1bZMr3Itx3
- TLSH T1C7B6C4257A5B9A6CC15BC4B4834B4A66497130CF0B39B9FF449492382F6EBF42F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Checks whether UAC is enabled
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.