baa57067fde3f2d30f0b7a0a1567e2f28f316febeaca44154305639c86343536

Analysis

max time kernel
148s
max time network
120s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 10:39

Target
2026-07-10_15eeefb6f8eda0ac042821560c2f603f_akira_cobalt-strike_coinminer_rusty-stealer_satacom.exe
Size 1.3MB
Sample260710-mp3xcsay4x
SHA256 baa57067fde3f2d30f0b7a0a1567e2f28f316febeaca44154305639c86343536
MD5 15eeefb6f8eda0ac042821560c2f603f
SHA1 0c3fd8fd5c3ceed2812ff43ffa2e2c3398211188
SHA512 9964155c5ae6e6ee063519629dfb67c4fbcb1caa97975591d8b075d2950c48b79c10169c35dd221ed7be64d54e6b57805a355fd6a920f0ec08cc16f2251dc8bd
SSDEEP 24576:BJMuSsX3jmcX6acg6KTtkMy+6FM3VIH06iyq:oXsnKcX6aQKTtFFkYIU6i
TLSH
T189557C47E66581F8C5AEC07CC757A536FA2278894B34A2EB27D04B053E26FD0AB3D750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-07-10_15eeefb6f8eda0ac042821560c2f603f_akira_cobalt-strike_coinminer_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-10_15eeefb6f8eda0ac042821560c2f603f_akira_cobalt-strike_coinminer_rusty-stealer_satacom.exe"
1⤵
PID:1312