General
- Target 2026-07-19_eb2bdd7a0182d0ebf11a6ac41d3febe4_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 14.1MB
- Sample260719-zfpplaew8s
- SHA256 ed24998b14aa55d3097e30e48ab00e8f04d73a18f78434c8dbbe37aef2fff8ef
- MD5 eb2bdd7a0182d0ebf11a6ac41d3febe4
- SHA1 c48f1a5be52e17033e6fe2dc32dda48edaa73203
- SHA512 2b11903d8ada78a41425a111c153baf39445649bb0b2fcc2bb63caf4c05a485bddaa00cd7dc807489a686e4101883319754b645ca4bd3179f9555266b0f318fe
- SSDEEP 196608:Fxt6dyFccaZh/V825ftF4m1LXh9IQ8QYfMzo4DQF:AiccZQtF4m1LXh9IQ8QYkM4UF
- TLSH T12DE68F03A3A8C5BDC78EC139C221923A5773F5453320E75E6E69CAE51EC1F446FA9362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-19_eb2bdd7a0182d0ebf11a6ac41d3febe4_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_eb2bdd7a0182d0ebf11a6ac41d3febe4_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_eb2bdd7a0182d0ebf11a6ac41d3febe4_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 14.1MB
- SHA256 ed24998b14aa55d3097e30e48ab00e8f04d73a18f78434c8dbbe37aef2fff8ef
- MD5 eb2bdd7a0182d0ebf11a6ac41d3febe4
- SHA1 c48f1a5be52e17033e6fe2dc32dda48edaa73203
- SHA512 2b11903d8ada78a41425a111c153baf39445649bb0b2fcc2bb63caf4c05a485bddaa00cd7dc807489a686e4101883319754b645ca4bd3179f9555266b0f318fe
- SSDEEP 196608:Fxt6dyFccaZh/V825ftF4m1LXh9IQ8QYfMzo4DQF:AiccZQtF4m1LXh9IQ8QYkM4UF
- TLSH T12DE68F03A3A8C5BDC78EC139C221923A5773F5453320E75E6E69CAE51EC1F446FA9362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.