Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    2026-07-20_89c679fe093cb1669e3a6ccda60c9f9d_akira_cobalt-strike_glassworm_rusty-stealer_satacom
  • Size 9.2MB
  • SHA256 58bf3b381781c4e3bcac6e5d9a7cd29fbec44b590aadb00640534f5431598819
  • MD5 89c679fe093cb1669e3a6ccda60c9f9d
  • SHA1 f3cef7c399cd8b4d9c4ab13a75bc86599e7591d6
  • SHA512 0d682e3cdb7ffcec7cfa84026e0ed4e10e361f3b41f3758a18a64bf86148966e78b05eadda7f0bd43aa121cb4c4cabef11eb3b0d7badec3c9087f3b0792d9e75
  • SSDEEP 98304:TWF0n7x09cmPV6N98SgS9l/jvlQP9aX/wqxMxzJQK2PwDOcksTZhWCbMzXmjbm:dn7xK6N979vyaXdy5ksTMzXm
  • TLSH
    T196A66E03F66250F8C06AC174831AE633F736B88D592476BF2BA45B312E6AF506F1D758
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryexecutiontrojan

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Command and Scripting Interpreter: PowerShell

    Powershell Invoke Web Request.

    execution

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Network Share Discovery

    Attempt to gather information on host network.

    discovery
  behavioral1behavioral2