848df170a27adb153dbd7820f998636b4f991ec8d69dc0750076129532e2e450

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 00:57

Target
2026-07-19_96e545723154504bada79c2f2c9c08ba_akira_cobalt-strike_glassworm_remcos_rusty-stealer_satacom.exe
Size 10.1MB
Sample260720-bbb1yaax6p
SHA256 848df170a27adb153dbd7820f998636b4f991ec8d69dc0750076129532e2e450
MD5 96e545723154504bada79c2f2c9c08ba
SHA1 cec9fbd7784681cf96d4d178a44727db913c0458
SHA512 fa0075905e0d09da59c5a50b14a76481ec69af48ca63790375449a9e4caa57459e9736f029f3c26e944d1a9846884037d2316b957c5df2c9fca924ee5abf8f7f
SSDEEP 98304:3XzDC6GGrL7RT/oAqrd0P1XHT/UMt4TZRFZUhjhmKdCvKKSj9V7/nZh0tWdF9f+5:nvCW+Bp0Pl4vbSjr/1FxWKjcr7
TLSH
T128B66B52F662B1ECC16AC075C34A6233EAA1B84D07347AEB5BE04B253E62FD0673D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
behavioral2/memory/5164-0-0x00007FF7C1080000-0x00007FF7C1AA7000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/5164-0-0x00007FF7C1080000-0x00007FF7C1AA7000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/5164-0-0x00007FF7C1080000-0x00007FF7C1AA7000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-07-19_96e545723154504bada79c2f2c9c08ba_akira_cobalt-strike_glassworm_remcos_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-19_96e545723154504bada79c2f2c9c08ba_akira_cobalt-strike_glassworm_remcos_rusty-stealer_satacom.exe"
1⤵
PID:5164

memory/5164-0-0x00007FF7C1080000-0x00007FF7C1AA7000-memory.dmp

Download

memory/5164-1-0x00007FF7C1080000-0x00007FF7C1AA7000-memory.dmp

Download