General
- Target 2026-07-14_7bf3a36b75029cd96b602d61778e751e_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 14.5MB
- Sample260714-d65b3sdw2l
- SHA256 d852447fdbb56b958da2c110ff26c64b045715129235055ff48dd6d2d9831a41
- MD5 7bf3a36b75029cd96b602d61778e751e
- SHA1 55d3c459f6f6fa38618e0a0cdce98c24b69b2a4d
- SHA512 bb37ec2773207173347b3195527617b8cc8c349cf6a04b219f215576e2e29fbdde7be4c0db2eb3aac02f83a97d0784df9d906d04af9b09b183014274bb1590c9
- SSDEEP 98304:A0WooMcFLETVIFSZCp82OHFE+GOgolZ90bz3rBIc9tBesn5bZiT1Dl+llVlWoOmN:XyETVce5990bz3rBF3Bes5bg5JMlROmN
- TLSH T12FE66B16B6AA54ECC49AC4B4C35A8633AA3178CA0B3579FF45D492353F6AAF01F3C714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-14_7bf3a36b75029cd96b602d61778e751e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_7bf3a36b75029cd96b602d61778e751e_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 14.5MB
- SHA256 d852447fdbb56b958da2c110ff26c64b045715129235055ff48dd6d2d9831a41
- MD5 7bf3a36b75029cd96b602d61778e751e
- SHA1 55d3c459f6f6fa38618e0a0cdce98c24b69b2a4d
- SHA512 bb37ec2773207173347b3195527617b8cc8c349cf6a04b219f215576e2e29fbdde7be4c0db2eb3aac02f83a97d0784df9d906d04af9b09b183014274bb1590c9
- SSDEEP 98304:A0WooMcFLETVIFSZCp82OHFE+GOgolZ90bz3rBIc9tBesn5bZiT1Dl+llVlWoOmN:XyETVce5990bz3rBF3Bes5bg5JMlROmN
- TLSH T12FE66B16B6AA54ECC49AC4B4C35A8633AA3178CA0B3579FF45D492353F6AAF01F3C714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1