2026-07-11_2d054007974cc9b9457baf421960f690_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_2d054007974cc9b9457baf421960f690_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 11.8MB
Sample260711-dnphxaaz2k
SHA256 2ba6116c39799da0a277e86408de3b7ca2b643d24d0e9f0e690997dadaaf493e
MD5 2d054007974cc9b9457baf421960f690
SHA1 3563d3e3dd0fecbdbe7e373160e65bd9c20985c0
SHA512 023aeee80b88348826f77a400a72f8446dfc34813020e4b0b37e6d2436f5502defee98aa8ac5f7940bc8db8186c98e1efc59d306c128819e45b405fd92e376fc
SSDEEP 98304:8jlmG6bxLWg5M1AaAl+gctyZck+pGHA2NATUGCl1Bvlt7R459jKUXPGddqR0IPk0:7FT5MyV5AxTw1xvt459jHPGftONkHGj
TLSH
T1E0C65A013F8A6D99D08CCCB0C38B4B934E1130EB1A76F9BF49D916192F6E6B85F19359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_2d054007974cc9b9457baf421960f690_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-07-11_2d054007974cc9b9457baf421960f690_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 11.8MB

2026-07-11_2d054007974cc9b9457baf421960f690_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH d37155c559c6d6764ffb0a1f58283a8a
SHA256 2ba6116c39799da0a277e86408de3b7ca2b643d24d0e9f0e690997dadaaf493e
MD5 2d054007974cc9b9457baf421960f690
SHA1 3563d3e3dd0fecbdbe7e373160e65bd9c20985c0
SHA512 023aeee80b88348826f77a400a72f8446dfc34813020e4b0b37e6d2436f5502defee98aa8ac5f7940bc8db8186c98e1efc59d306c128819e45b405fd92e376fc
SSDEEP 98304:8jlmG6bxLWg5M1AaAl+gctyZck+pGHA2NATUGCl1Bvlt7R459jKUXPGddqR0IPk0:7FT5MyV5AxTw1xvt459jHPGftONkHGj
TLSH
T1E0C65A013F8A6D99D08CCCB0C38B4B934E1130EB1A76F9BF49D916192F6E6B85F19359
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5755480

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

l2_launcher.pdb

bcryptprimitives

ProcessPrng

ntdll

RtlNtStatusToDosError NtReadFile NtCreateFile NtWriteFile RtlGetVersion NtOpenFile NtDeviceIoControlFile NtCreateNamedPipeFile NtCancelIoFileEx

kernel32

InitializeCriticalSectionEx LoadLibraryW Sleep GetModuleHandleA RtlUnwindEx SetUnhandledExceptionFilter CreateIoCompletionPort GetQueuedCompletionStatusEx GetModuleHandleW InitializeSListHead RtlLookupFunctionEntry WaitForSingleObjectEx GetCurrentProcess GetCurrentProcessId WideCharToMultiByte ReleaseMutex MultiByteToWideChar HeapAlloc EncodePointer FormatMessageW GetModuleFileNameW SetHandleInformation SleepEx GetSystemTimePreciseAsFileTime SetWaitableTimer ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW DuplicateHandle FlsFree FlsSetValue FlsGetValue FlsAlloc RaiseException RtlPcToFileHeader GetSystemTimeAsFileTime SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetFinalPathNameByHandleW CreateMutexA SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc SetLastError GetLastError SwitchToThread GetStdHandle GetUserDefaultUILanguage LCIDToLocaleName CopyFileExW SetFilePointerEx CloseHandle RemoveDirectoryW WaitForSingleObject GetCurrentThreadId SetFileInformationByHandle lstrlenW GetFileInformationByHandleEx SystemTimeToFileTime SystemTimeToTzSpecificLocalTime FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter QueryPerformanceFrequency GetEnvironmentVariableW GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext GetCommandLineW SetEnvironmentVariableW AddVectoredExceptionHandler PostQueuedCompletionStatus FindNextFileW SetFileAttributesW GetFileAttributesW CreateProcessW CreateWaitableTimerExW ReadFileEx WriteFileEx CreateThread DeviceIoControl MoveFileExW DeleteFileW GetSystemInfo GetTempPathW GetFileInformationByHandle SetFileTime CreateFileW LoadLibraryA DeleteCriticalSection GetConsoleMode GetConsoleOutputCP WriteConsoleW LoadLibraryExA CreateDirectoryW GetProcAddress FindClose FindFirstFileExW OutputDebugStringA OutputDebugStringW LoadLibraryExW FreeLibrary GetFullPathNameW SetFileCompletionNotificationModes

user32

EnableMenuItem IsProcessDPIAware DrawIconEx GetDC SystemParametersInfoA ShowWindow SendMessageW PostQuitMessage GetActiveWindow RegisterWindowMessageA MonitorFromWindow TrackPopupMenu SetCapture ReleaseCapture GetWindowDC FillRect SetForegroundWindow ReleaseDC GetCursorPos DrawTextW InvalidateRgn SetFocus GetWindow GetParent SetWindowRgn CheckMenuItem FindWindowExW GetWindowLongW GetMenu FlashWindowEx LoadCursorW CloseTouchInputHandle GetTouchInputInfo SetCursor ScreenToClient TrackMouseEvent SystemParametersInfoW GetAsyncKeyState AdjustWindowRectEx RegisterRawInputDevices GetMenuBarInfo RegisterTouchWindow DefWindowProcW SetMenu ChangeDisplaySettingsExW GetClientRect IsWindow IsIconic SetCursorPos GetForegroundWindow InsertMenuW IsWindowEnabled EnableWindow UpdateWindow InvalidateRect IsWindowVisible GetWindowTextW GetWindowTextLengthW SetWindowTextW RemoveMenu CreateIcon SetMenuItemInfoW DrawMenuBar SetParent CreatePopupMenu CreateMenu CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu SetPropW AppendMenuW MapWindowPoints TranslateAcceleratorW GetMenuItemInfoW OffsetRect MsgWaitForMultipleObjectsEx DispatchMessageW MapVirtualKeyW GetUpdateRect PeekMessageW PostThreadMessageW ValidateRect GetRawInputData GetMessageW SetWindowLongPtrW GetKeyboardState EnumDisplayMonitors MonitorFromPoint SetWindowDisplayAffinity SendInput PostMessageW MonitorFromRect ToUnicodeEx EnumChildWindows DispatchMessageA TranslateMessage GetMessageA GetKeyState MapVirtualKeyExW SetWindowPos CreateWindowExW RegisterClassExW GetKeyboardLayout GetWindowLongPtrW RedrawWindow AdjustWindowRect ShowCursor ClipCursor GetSystemMetrics DestroyWindow GetClipCursor GetWindowRect SetWindowLongW GetSystemMenu GetWindowPlacement GetMonitorInfoW SetWindowPlacement ClientToScreen

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

comctl32

SetWindowSubclass DefSubclassProc RemoveWindowSubclass TaskDialogIndirect

ole32

CoTaskMemFree CoCreateFreeThreadedMarshaler CoUninitialize CoCreateInstance RevokeDragDrop CoInitializeEx RegisterDragDrop CoTaskMemAlloc OleInitialize

shlwapi

SHCreateMemStream

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute DwmGetWindowAttribute

shell32

SHGetKnownFolderPath ShellExecuteW SHAppBarMessage SHCreateItemFromParsingName DragFinish DragQueryFileW

advapi32

RegCloseKey EventWriteTransfer RegQueryValueExW RegOpenKeyExW EventSetInformation RegGetValueW EventRegister EventUnregister

gdi32

CreateRectRgn SetTextColor DeleteObject CreateCompatibleDC CombineRgn BitBlt CreateDIBSection SelectObject CreateSolidBrush DeleteDC SetBkMode GetDeviceCaps

oleaut32

SysFreeString GetErrorInfo SetErrorInfo SysStringLen

crypt32

CertEnumCertificatesInStore CertCloseStore CertDuplicateCertificateChain CertVerifyCertificateChainPolicy CertAddCertificateContextToStore CertGetCertificateChain CertDuplicateStore CertDuplicateCertificateContext CertFreeCertificateContext CertOpenStore CertFreeCertificateChain

ws2_32

getaddrinfo WSACleanup WSAStartup freeaddrinfo send getpeername bind setsockopt WSAGetLastError getsockname getsockopt connect ioctlsocket WSASocketW WSASend shutdown WSAIoctl closesocket recv

secur32

QueryContextAttributesW AcquireCredentialsHandleA DecryptMessage DeleteSecurityContext FreeCredentialsHandle ApplyControlToken InitializeSecurityContextW AcceptSecurityContext EncryptMessage FreeContextBuffer

api-ms-win-crt-string-l1-1-0

wcslen _wcsicmp wcscmp strcpy_s

api-ms-win-crt-math-l1-1-0

__setusermatherr round roundf floor pow trunc

api-ms-win-crt-convert-l1-1-0

_wtoi wcstol _ultow_s

api-ms-win-crt-runtime-l1-1-0

_c_exit _initialize_onexit_table _register_onexit_function _cexit __p___argv __p___argc _exit exit _register_thread_local_exe_atexit_callback _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _crt_atexit _set_app_type _seh_filter_exe terminate abort

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc _callnewh _set_new_mode calloc free

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_2d054007974cc9b9457baf421960f690_akira_cobalt-strike_glassworm_rusty-stealer_satacom

bcryptprimitives

ntdll

kernel32

user32

api-ms-win-core-synch-l1-2-0

comctl32

ole32

shlwapi

dwmapi

shell32

advapi32

gdi32

oleaut32

crypt32

ws2_32

secur32

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic