2026-07-14_0e867b23982ecd41a7e25cca667495ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-14_0e867b23982ecd41a7e25cca667495ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 298KB
Sample260714-e61vbsgw4w
SHA256 6e16d5996a9728bc7a7cd12aaf176cc54f9c327d3fbfd91c9c4c3ecc2bb10b4d
MD5 0e867b23982ecd41a7e25cca667495ce
SHA1 b426a49b94279f5aa75cb70cbc990350d604a231
SHA512 dd48008ea86dd067b5f357d3061dafef4ee945145399bdfd4bff2b6c40782c4812d4f6dc4e1f57bb5999e6b943645ce610adeb3a548e722afac44e524acd5195
SSDEEP 6144:UneQb4OAhTKRlXDQN5wXSwie9nzwgEUE9p17qz50XjgeeYzgwG0gq83HNTDlWUWu:Ueo4YXDhEZP4YFGv
TLSH
T1CB543B25BA56A4ACD55BC07883468A726971B4CA1B31B9FF02C441383FAEEF52F3C754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-14_0e867b23982ecd41a7e25cca667495ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-07-14_0e867b23982ecd41a7e25cca667495ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 298KB

2026-07-14_0e867b23982ecd41a7e25cca667495ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 2e137d7cb0ae74ba178004c11d46a75a
SHA256 6e16d5996a9728bc7a7cd12aaf176cc54f9c327d3fbfd91c9c4c3ecc2bb10b4d
MD5 0e867b23982ecd41a7e25cca667495ce
SHA1 b426a49b94279f5aa75cb70cbc990350d604a231
SHA512 dd48008ea86dd067b5f357d3061dafef4ee945145399bdfd4bff2b6c40782c4812d4f6dc4e1f57bb5999e6b943645ce610adeb3a548e722afac44e524acd5195
SSDEEP 6144:UneQb4OAhTKRlXDQN5wXSwie9nzwgEUE9p17qz50XjgeeYzgwG0gq83HNTDlWUWu:Ueo4YXDhEZP4YFGv
TLSH
T1CB543B25BA56A4ACD55BC07883468A726971B4CA1B31B9FF02C441383FAEEF52F3C754
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

219276

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

revshell.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

kernel32

UnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId IsDebuggerPresent SetUnhandledExceptionFilter CreateThread CloseHandle GetConsoleWindow FreeEnvironmentStringsW CompareStringOrdinal GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject Sleep QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW SetFileInformationByHandle GetCurrentProcess DuplicateHandle GetStdHandle GetCurrentProcessId SetHandleInformation WriteFileEx SleepEx GetExitCodeProcess GetProcessHeap HeapFree HeapReAlloc lstrlenW ReleaseMutex FindClose CreateFileW CreateEventW GetOverlappedResult GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW FindFirstFileExW MoveFileExW CopyFileExW ReadFile CancelIo GetModuleHandleW FormatMessageW GetModuleFileNameW ExitProcess CreateNamedPipeW ReadFileEx WaitForMultipleObjects GetFullPathNameW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW WideCharToMultiByte IsProcessorFeaturePresent GetModuleHandleA GetProcAddress HeapAlloc WaitForSingleObjectEx LoadLibraryA CreateMutexA

user32

ShowWindow

ntdll

NtWriteFile RtlNtStatusToDosError NtReadFile

ws2_32

recv send WSASocketW getaddrinfo connect closesocket freeaddrinfo WSACleanup WSAStartup WSAGetLastError

vcruntime140

__C_specific_handler _CxxThrowException __current_exception_context __current_exception memmove memset memcmp memcpy __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initterm _set_app_type exit _exit _get_initial_narrow_environment _configure_narrow_argv __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe _initterm_e _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-14_0e867b23982ecd41a7e25cca667495ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

bcrypt

advapi32

kernel32

user32

ntdll

ws2_32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic