2026-07-10_b9c0227f06a438fcb658e96c7b9f3f2d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-10_b9c0227f06a438fcb658e96c7b9f3f2d_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 4.1MB
Sample260710-frrtjsew7x
SHA256 24afc5bc2d31311861f5d64e776f2524cada58839b07713026e1e751f0919e96
MD5 b9c0227f06a438fcb658e96c7b9f3f2d
SHA1 b3047f02a81ba92ba555b40a4ad440cb6c3cb630
SHA512 fa0e1678abb75fbd396c1ce10eacb95e1a0940cf450f95417dee7b2ce9989b5a0f1a79791b4a7ed9c7e6a1f70ea942a7eeda5fb43028008c676a83391f4746f3
SSDEEP 49152:s8nrfSe5TFlW3YaiK5WsgqdDlPx642vCrU7t1ogsLkqtF473dDLzC6Jq27uetmGY:s8nrSq7+dtPgGU7nohkxJj7L/Y
TLSH
T117166D83F79541E9E0DEC178C79A9223FBF2B88E0620B69B1794CB612F57B605B5D304
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx

Malware Config

Signatures

Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_Binary_References_Browsers

Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_SQLQuery_ConfidentialDataStore

Detects executables referencing combination of virtualization drivers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_VM_Evasion_VirtDrvComb

Detects executables referencing virtualization MAC addresses 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_VM_Evasion_MACAddrComb

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_b9c0227f06a438fcb658e96c7b9f3f2d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-07-10_b9c0227f06a438fcb658e96c7b9f3f2d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 4.1MB