2026-07-10_af206791419453501fe13d086252f629_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-10_af206791419453501fe13d086252f629_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom
Size 4.0MB
Sample260710-fr7vrsew71
SHA256 e09d248d6bdb9485c97ac15eb33c7bf6ae991d1c3a95f5c51e7bf1833639b96c
MD5 af206791419453501fe13d086252f629
SHA1 9c29b28dfbc33d42b1050215094260023de75fbc
SHA512 bb7a30f600fa92aeb6bd7e69fff9308e82209ff7243ad871aaeb212eee750df900f689a59ac66e7f49b5be8720a87abec32980ed3ddd6be5cf433791d4e73683
SSDEEP 49152:Wn+728XtUzS1oGz5tjWk25lV9dGe6QPv/c9VWBFbE+Jf/m+OZdaSSwvkeNwDHbE3:W+7tXc9kK6Q/TFbTJ/iYTbUUWn1
TLSH
T1A6166B43F6E581E9E45AC03CC31AD223EBF2BC8D1620B69B57D4DA612F53B605B5E324
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx

Malware Config

Signatures

Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_Binary_References_Browsers

Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_SQLQuery_ConfidentialDataStore

Detects executables referencing combination of virtualization drivers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_VM_Evasion_VirtDrvComb

Detects executables referencing virtualization MAC addresses 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_VM_Evasion_MACAddrComb

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_af206791419453501fe13d086252f629_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom

File Explorer

2026-07-10_af206791419453501fe13d086252f629_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom

.exe 4.0MB