General
- Target 2026-07-14_b0602009332862eca2960ecd0e2b64a6_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 687KB
- Sample260714-drfeeads2m
- SHA256 c01f900aaee0b8cd692a3ae0fcd7153beeafd463cb392098d1f3b2f1770f33d6
- MD5 b0602009332862eca2960ecd0e2b64a6
- SHA1 56c7c5d0b046c87eefd9a69975814d0d7b107fcd
- SHA512 48770d494b024daa8844a74dbf507bf827e45bbd5e3707f54046bccd748918ea0c28e876d8bb9cead511fd9ab8b947469f6d448430cda6ad54fdfede83f3c05d
- SSDEEP 12288:8l6cGW7+TBdq0KplKVTErIYHvR+PdcEEUmFfE:5c8k0elWQIYHvu
- TLSH T1C8E44B06FA9548BCD04AC87482468F56AB3274D71B26EADF0389022C3F6E7F55F39764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_b0602009332862eca2960ecd0e2b64a6_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_b0602009332862eca2960ecd0e2b64a6_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_b0602009332862eca2960ecd0e2b64a6_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 687KB
- SHA256 c01f900aaee0b8cd692a3ae0fcd7153beeafd463cb392098d1f3b2f1770f33d6
- MD5 b0602009332862eca2960ecd0e2b64a6
- SHA1 56c7c5d0b046c87eefd9a69975814d0d7b107fcd
- SHA512 48770d494b024daa8844a74dbf507bf827e45bbd5e3707f54046bccd748918ea0c28e876d8bb9cead511fd9ab8b947469f6d448430cda6ad54fdfede83f3c05d
- SSDEEP 12288:8l6cGW7+TBdq0KplKVTErIYHvR+PdcEEUmFfE:5c8k0elWQIYHvu
- TLSH T1C8E44B06FA9548BCD04AC87482468F56AB3274D71B26EADF0389022C3F6E7F55F39764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Windows security bypass
-
Disables RegEdit via registry modification
-
Disables cmd.exe use via registry modification
-
Windows security modification
-
Adds Run key to start application