General
- Target 2026-07-12_cc1f35c230c3431d0a92a283fa689829_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 9.0MB
- Sample260712-y9fhcaav4x
- SHA256 fab2606daa20873dcf164322cc44d0edfa154fc273cadb091cca61bcb2cbe060
- MD5 cc1f35c230c3431d0a92a283fa689829
- SHA1 28728008c380a2ea88cdecb202caec9969a0f673
- SHA512 ce93d19ffe5ce3c35c9732845e91ec71da63a0f3140522ca9f8b4bf00ebf50d33f71c15531ab37aa4791bd3745c7e82741c3fa0228be1a74f318ab333d7c4cf4
- SSDEEP 98304:MDDi9G38/377hmP3DjikaXCHJVO4yQNgCHTn+kq54IQVX:VQ3+vk8ypYTQNdT101QVX
- TLSH T107969C43F29680E8C49EC5B4C35AA637FB32B8890935B2DB5BD45B112F76B909F4D348
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_cc1f35c230c3431d0a92a283fa689829_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_cc1f35c230c3431d0a92a283fa689829_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_cc1f35c230c3431d0a92a283fa689829_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 9.0MB
- SHA256 fab2606daa20873dcf164322cc44d0edfa154fc273cadb091cca61bcb2cbe060
- MD5 cc1f35c230c3431d0a92a283fa689829
- SHA1 28728008c380a2ea88cdecb202caec9969a0f673
- SHA512 ce93d19ffe5ce3c35c9732845e91ec71da63a0f3140522ca9f8b4bf00ebf50d33f71c15531ab37aa4791bd3745c7e82741c3fa0228be1a74f318ab333d7c4cf4
- SSDEEP 98304:MDDi9G38/377hmP3DjikaXCHJVO4yQNgCHTn+kq54IQVX:VQ3+vk8ypYTQNdT101QVX
- TLSH T107969C43F29680E8C49EC5B4C35AA637FB32B8890935B2DB5BD45B112F76B909F4D348
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.
-
Suspicious use of NtSetInformationThreadHideFromDebugger