General
- Target 2026-07-14_3d362cf23972d3fe92d5e4ddf1a5ac2d_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 23.9MB
- Sample260714-eptppadz4r
- SHA256 c52dbcdee795b310d80e88dd7bf52eb375aa9b1ca90e070b58199d31512669b6
- MD5 3d362cf23972d3fe92d5e4ddf1a5ac2d
- SHA1 7aeb86f7fbb0ba25c804c01d4a5389cdae36b645
- SHA512 963f18ff50281db18fa8115e723cf49db360556f1deabd621daa6e5e9fd712061f892f10b91d94ac2cd5522c6c6a2592665e433db56306bdf7d2bdb0b6a35682
- SSDEEP 393216:LXhQpt7UFVxZYI10X+crgbI9ArucUYu+D:Dhfzt1p7bAXv+D
- TLSH T19747AE03F6A184E8D06EC1B4931AD733EB72BC9D4924B26B5BD45B213F2AF506B1C758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-14_3d362cf23972d3fe92d5e4ddf1a5ac2d_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_3d362cf23972d3fe92d5e4ddf1a5ac2d_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_3d362cf23972d3fe92d5e4ddf1a5ac2d_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 23.9MB
- SHA256 c52dbcdee795b310d80e88dd7bf52eb375aa9b1ca90e070b58199d31512669b6
- MD5 3d362cf23972d3fe92d5e4ddf1a5ac2d
- SHA1 7aeb86f7fbb0ba25c804c01d4a5389cdae36b645
- SHA512 963f18ff50281db18fa8115e723cf49db360556f1deabd621daa6e5e9fd712061f892f10b91d94ac2cd5522c6c6a2592665e433db56306bdf7d2bdb0b6a35682
- SSDEEP 393216:LXhQpt7UFVxZYI10X+crgbI9ArucUYu+D:Dhfzt1p7bAXv+D
- TLSH T19747AE03F6A184E8D06EC1B4931AD733EB72BC9D4924B26B5BD45B213F2AF506B1C758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.