General
- Target 2026-07-19_b23b07aa7e439f93c0c762e20caee630_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 688KB
- Sample260720-a4dvkacz8t
- SHA256 fe94e6f06537c41a5e2b7fb2a5d855a26ca7fb6b14953dfe6bf5496800f87c41
- MD5 b23b07aa7e439f93c0c762e20caee630
- SHA1 953fb6c47270cae676e4f984e4a242b847a6562c
- SHA512 765a87de4ef47acb195c03b02d2686e44a6e0ec96eb79667eb83b93549f69d247ba8bf95dbba0ca217d01d10d22ffab13344785ec7b99e6c1918953a2670cd1c
- SSDEEP 12288:Vyh7jbhUTYdAA8jGSU6Gvy9cRY/P8lC4EEj:IhTJqxj26Wy9IY/
- TLSH T173E44A06FE9508BCD05AC87482458F56AB3234D71B26EADF038902293F6EBF55F39764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_b23b07aa7e439f93c0c762e20caee630_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_b23b07aa7e439f93c0c762e20caee630_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_b23b07aa7e439f93c0c762e20caee630_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 688KB
- SHA256 fe94e6f06537c41a5e2b7fb2a5d855a26ca7fb6b14953dfe6bf5496800f87c41
- MD5 b23b07aa7e439f93c0c762e20caee630
- SHA1 953fb6c47270cae676e4f984e4a242b847a6562c
- SHA512 765a87de4ef47acb195c03b02d2686e44a6e0ec96eb79667eb83b93549f69d247ba8bf95dbba0ca217d01d10d22ffab13344785ec7b99e6c1918953a2670cd1c
- SSDEEP 12288:Vyh7jbhUTYdAA8jGSU6Gvy9cRY/P8lC4EEj:IhTJqxj26Wy9IY/
- TLSH T173E44A06FE9508BCD05AC87482458F56AB3234D71B26EADF038902293F6EBF55F39764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Windows security bypass
-
Disables RegEdit via registry modification
-
Disables cmd.exe use via registry modification
-
Windows security modification
-
Adds Run key to start application