Analysis

  • max time kernel
    151s
  • max time network
    127s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/07/2026, 21:10

General

  • Target
    2026-07-19_cb88088875e486e8245f08023252d96c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
  • Size 44.8MB
  • Sample260719-zz7dract3q
  • SHA256 5a423c31fc87d73dec523bb109beeddff233c7ccc5533c65c3acf733a4eb18fb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-19_cb88088875e486e8245f08023252d96c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-19_cb88088875e486e8245f08023252d96c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4532
    • C:\Users\Admin\AppData\Local\Temp\2026-07-19_cb88088875e486e8245f08023252d96c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-19_cb88088875e486e8245f08023252d96c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe" gateway --host 127.0.0.1 --port 9765 --remote-host 0.0.0.0 --remote-port 59765 --gateway-idle-timeout-secs 300 --name gateway-for-dcc-mcp-server
      2⤵
        PID:4496
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService
      1⤵
        PID:4516

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            gateway_admin.sqlite

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\gateway_admin.sqlite
            • Size 92KB
            • SHA256 00faf5a056fa5cd31cceb498660d5780dd3436331e069935b1a797a7da0750dd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 1KB
            • SHA256 3524cd3f6f980642026233ba363aa2a3fbbd2608e1965831c37647295a86f55f
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 1KB
            • SHA256 6007ee91b224522b068c8f46ecd6d75d97b5319a1bfe4d3bcbab32df88c5709a
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 eec7ef4b4765d9e143c6f60eb38547dcd99f605c181e143016e3a0551bd5ab22
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 59a8558a1fba9b6b02e65bf61ca6e1519d0c3fcee624cf1aa2161229f7a4fb47
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 2b197836717658756c2c685fa45830e04444c29e25a74478d8366d624eabc341
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 78eecc866825860e79d82bd82ea23ee4a0db451eb9ad51e468078a8740faa6dd
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 deca674a24cccce81c4f7c258f9dd09c1659e73f68392edab3d24403885d01ab
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 c3e9024e0cf65e606680e487aef69847809e090406644fa442231eb21bb2ffa9
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 ee1b23ee9bee033fc57375375d2c0f2fe09616821d5afe9343fd6313d99d9c25
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 4c04b23ee471083516ae85989d2d5ef48cecfb8ca710ff8aae53bc559d6e9799
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 d8c820d11bf02a5796ddc275c813b69aa34fc286111f93eba57e2be796841d7a
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 629f90e54a7b5b4f694f99ec9c377b1e44e861c93bca2f556391199fe7754e62
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 f42849ac814e09bdbb9757399d1d108eec878d0f3183682f36c64ac1be7dca18
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 bb055ff67c3684de826a337569ffdd9345d073bd1675b7d5a9f07037220cad1e
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 c3b05ccd4eb3de5737503866ede56dc7cde0ffd03ed56d492ae6a38001eed0e2
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 65e8318eae04b53468e7e389497e5a3c643989c68c02ebaadd0ecca073223229
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 6127b19cfebe5130e84ed6121b8d958e9c82ddf1656fda032d6f7a92100ecc4f
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 b8ea60d0e5377b8fb7271655690296eb01299a87a1330bbc1b6c2663dde1b61e
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 0bdf72a1cb4bc6dc90e30a7c2b475a71257052f233c07fbb59577305375ce748
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 fa07c4aa4ac2beb72634caee916229016e55dba200fb3e788b6470c6ff1e9ebd
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 5db7dcfa1679c2e7c1e83415f602479f61594803e4013fe8b916708e4817c709
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 f910f92250ca077079532d7045b73e6446f82bd61191e3f4ad7026424d4c1913
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 c4431fb3a57fb3cf6216b7a0c973f7de2c250a69342a30a34e301134fcc55a9a
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 b18b72458eeef7416a4021bd3d55eab71fc320618825000e8e745cb10de4c444
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 179f721bdcf863f7272c87dc3b60f6e592910340ff6fd7cfea586bf2669332e7
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 7791b77154b3873631db4ebe3963fe2925123676087f71ebb5aa8b247ba11319
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 7f1b31bd8e38a78589872187ddb2ede1cb5cf444a0b7bb63805a22fd4b3ebeea
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 775335ba2801f08cd584a003094b14cc6b76bf6980ca53232f839eea4bc2aa3d
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 d8a0525c9f9b8b0a1c33d9a155b0bc6f63149784fd9c8dd3fa7ee7cef6d63659
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 f3f54b136bcfc42b3b20528b8c1d7ec6891e5c1e650a55069132b2626268ae91
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 a958791ae9f00c2742337e7f81349e9af1e16af2009d5488fd73848d135145ac
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 8cb936b6bd2052ad27e7c92a3eda10b5b7c2b60761407921a9901043ce8d5229
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 af17a3db3a0e4629b55900c1862614f95f00d3bf4b8ee56696a5816e61edcf94
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 11740784bd8002354eeeaabcb84e920568b727ad8bb79efd342b1b76f90972bb
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 e7d8c175972bb4749c33842234779d4d9f29abb2f1e7efaba0ed73fb19c51404
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 589f09a7f4a6eeb743bc55796eb2139017864fd9e71fee0f62ae654989edb771
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 53d08c7c82452003d1b6819657de0a113cb588eb75aaaba6f9555d1c5298e297
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 cdfd870ee98935f36edafcd8d312554aacaba1a150af4dc33193706219b25303
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 18c218ce1757017e22e93b25be9c96ecccc2bc260a8fc241ce1507417733c520
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 f01b65076b3d76b75444a93b795656fc723624eb4ada06bf9399a44506994374
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 c7f75447cbff6d29e93a73e0ebe55a2b6462b53e1461faad811aae0eb3e2d3ba
            • MD5 SHA1 SHA512 TLSH

            services.json

            • Path C:\Users\Admin\AppData\Local\Temp\dcc-mcp-registry\services.json
            • Size 2KB
            • SHA256 91485620a4cda7f372c29ae3b53ccf1d9e2535ff93cb52299c8ebbd107dc0fc2
            • MD5 SHA1 SHA512 TLSH