General
- Target 2026-07-08_7da521a338c0ab926608687a8950d61b_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 3.9MB
- Sample260708-v5z5eaex9z
- SHA256 242599a3846a1da3928065d2258f6a5fae9583cd48e4de223d464c099edd65d7
- MD5 7da521a338c0ab926608687a8950d61b
- SHA1 a322ee67a6e1ee97dd902f94c961d78f76933b6f
- SHA512 dcc01c6bd38f43ce0431563afa64eb1ddef83dd62946390cfb284fe19ab5c33b2db50b2de5f1bf759e0ce9d5c48971e63d97154c2fd2c5baa9e5ca7fb6698a04
- SSDEEP 98304:2RP/dXuoFqPyVNpTVgUeHd4m0IC3KFHRFWi6k:CPFkPyVNcki6k
- TLSH T125166C07E29581F8C0AEC078C36BA637EA32B8C94534B29F6BE44B113F56F506B1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_7da521a338c0ab926608687a8950d61b_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_7da521a338c0ab926608687a8950d61b_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_7da521a338c0ab926608687a8950d61b_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 3.9MB
- SHA256 242599a3846a1da3928065d2258f6a5fae9583cd48e4de223d464c099edd65d7
- MD5 7da521a338c0ab926608687a8950d61b
- SHA1 a322ee67a6e1ee97dd902f94c961d78f76933b6f
- SHA512 dcc01c6bd38f43ce0431563afa64eb1ddef83dd62946390cfb284fe19ab5c33b2db50b2de5f1bf759e0ce9d5c48971e63d97154c2fd2c5baa9e5ca7fb6698a04
- SSDEEP 98304:2RP/dXuoFqPyVNpTVgUeHd4m0IC3KFHRFWi6k:CPFkPyVNcki6k
- TLSH T125166C07E29581F8C0AEC078C36BA637EA32B8C94534B29F6BE44B113F56F506B1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.