2026-07-20_261f51aa257cc588e39a4eba8bb2444c_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_261f51aa257cc588e39a4eba8bb2444c_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 15.6MB
Sample260720-mcap2sev7l
SHA256 ef011ae56548446211d80e7f88ea0fded2d46acb9cd737bb673e3be098232301
MD5 261f51aa257cc588e39a4eba8bb2444c
SHA1 90f04f5061b7ea4ecca547791f0a12bb89979795
SHA512 65a5536ac8e9b42c96235729f7d958ad1b23c83780cac72ae1549a6a1b58c482aca12d27f298afab5bbfdabcc6f6391a497bd466db5fead0f8eb07aee089c297
SSDEEP 98304:QlvVl9BGI2UNNJ693aTZg9g8oF6s4ZT1lyvu7x/HyJV1wGAgrSwAKbOLyAqoINR4:+Nl9J6cTag8CMTiUiP6d/v/F
TLSH
T12BF618217B5B99ADC19BC474824B46725A3170CB0B35BAFF44D486392F6ABF42F38358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_261f51aa257cc588e39a4eba8bb2444c_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-07-20_261f51aa257cc588e39a4eba8bb2444c_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 15.6MB

2026-07-20_261f51aa257cc588e39a4eba8bb2444c_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH bc7dae3c8eaa3eda4b4af0af03335ade
SHA256 ef011ae56548446211d80e7f88ea0fded2d46acb9cd737bb673e3be098232301
MD5 261f51aa257cc588e39a4eba8bb2444c
SHA1 90f04f5061b7ea4ecca547791f0a12bb89979795
SHA512 65a5536ac8e9b42c96235729f7d958ad1b23c83780cac72ae1549a6a1b58c482aca12d27f298afab5bbfdabcc6f6391a497bd466db5fead0f8eb07aee089c297
SSDEEP 98304:QlvVl9BGI2UNNJ693aTZg9g8oF6s4ZT1lyvu7x/HyJV1wGAgrSwAKbOLyAqoINR4:+Nl9J6cTag8CMTiUiP6d/v/F
TLSH
T12BF618217B5B99ADC19BC474824B46725A3170CB0B35BAFF44D486392F6ABF42F38358
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10948288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

tuxplayerx.pdb

bcryptprimitives

ProcessPrng

ntdll

NtWriteFile RtlGetVersion NtCreateFile NtCancelIoFileEx RtlNtStatusToDosError NtDeviceIoControlFile NtOpenFile NtCreateNamedPipeFile NtReadFile

advapi32

SystemFunction036 RegOpenKeyExW RegCloseKey EventRegister EventSetInformation EventWriteTransfer RegGetValueW EventUnregister RegQueryValueExW

kernel32

CreateMutexA WriteConsoleW GetConsoleOutputCP CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFinalPathNameByHandleW CreateDirectoryW GetFileInformationByHandleEx FindNextFileW SetEnvironmentVariableW SetWaitableTimer CreateWaitableTimerExW CreateThread WaitForMultipleObjects ReadFileEx ExitProcess CancelIo CreateEventW ReleaseMutex RtlPcToFileHeader SleepConditionVariableSRW GetModuleHandleW ReleaseSRWLockExclusive FindClose FindFirstFileExW GetSystemTimePreciseAsFileTime QueryPerformanceFrequency GetProcessId TerminateProcess GetExitCodeProcess SleepEx WriteFileEx GetStdHandle WakeAllConditionVariable DuplicateHandle GetCurrentProcess SetFileInformationByHandle GetCommandLineW GetEnvironmentStringsW GetUserDefaultUILanguage LCIDToLocaleName GetCurrentDirectoryW SetLastError OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcessHeap HeapFree LoadLibraryExW FlsAlloc FlsGetValue FlsSetValue FreeLibrary RtlLookupFunctionEntry RtlCaptureContext SwitchToThread WaitForSingleObject SetThreadStackGuarantee AddVectoredExceptionHandler CompareStringOrdinal FreeEnvironmentStringsW DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection RaiseException GetCurrentThreadId AreFileApisANSI lstrlenW HeapCreate GetFullPathNameW GetDiskFreeSpaceW LockFile SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathW CreateMutexW UnmapViewOfFile HeapValidate LoadLibraryA HeapSize AcquireSRWLockExclusive MultiByteToWideChar GetTempPathA GetDiskFreeSpaceA LoadLibraryExA GetFileAttributesA HeapAlloc GetFileAttributesExW FlushViewOfFile CreateFileA WaitForSingleObjectEx DeleteFileA FlsFree FormatMessageW LoadLibraryW DeleteFileW CreatePipe GetFileAttributesW CreateFileW GetFileInformationByHandle GetConsoleMode SetNamedPipeHandleState HeapReAlloc GetSystemInfo HeapCompact HeapDestroy UnlockFile LocalFree LockFileEx InitializeCriticalSectionEx GetFileSize GetCurrentProcessId WideCharToMultiByte SetHandleInformation GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter GetTickCount FlushFileBuffers EncodePointer InitializeSListHead RtlVirtualUnwind GetEnvironmentVariableW CreateIoCompletionPort CancelIoEx ReadFile GetOverlappedResult WriteFile PostQueuedCompletionStatus SetUnhandledExceptionFilter RtlUnwindEx GetModuleHandleA Sleep SetFileCompletionNotificationModes GetProcAddress GetQueuedCompletionStatusEx CloseHandle SystemTimeToFileTime GetTimeZoneInformationForYear GetCurrentThread

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

user32

SetWindowPlacement DispatchMessageA GetWindowPlacement SetWindowPos ChangeDisplaySettingsExW DrawTextW GetWindowDC EnumChildWindows OffsetRect GetMenuBarInfo PostQuitMessage TrackPopupMenu CheckMenuItem SetMenuItemInfoW AppendMenuW FlashWindowEx PeekMessageW InsertMenuW CreateAcceleratorTableW DestroyAcceleratorTable CreatePopupMenu DefWindowProcW DestroyMenu RemoveMenu SetMenu DrawMenuBar GetMenuItemInfoW GetMessageA RedrawWindow GetAsyncKeyState GetKeyboardState SendInput SetForegroundWindow GetWindowTextW GetWindowTextLengthW SetWindowTextW ToUnicodeEx GetKeyState MapVirtualKeyExW PostThreadMessageW GetKeyboardLayout DispatchMessageW SystemParametersInfoA SetPropW TranslateMessage GetRawInputData CreateIcon IsWindowVisible GetMenu MonitorFromPoint EnumDisplayMonitors SetWindowDisplayAffinity ClipCursor GetClipCursor GetMessageW AdjustWindowRect SendMessageW ShowCursor SetWindowLongW EnableMenuItem GetSystemMenu DestroyIcon CreateWindowExW ReleaseCapture SetCapture IsIconic MapVirtualKeyW MsgWaitForMultipleObjectsEx RegisterRawInputDevices RegisterClassExW InvalidateRgn SetParent ShowWindow MapWindowPoints SetFocus GetWindow RegisterWindowMessageA ReleaseDC SetWindowRgn GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW IsWindowEnabled EnableWindow IsProcessDPIAware GetDC SetCursor TranslateAcceleratorW DrawIconEx LoadCursorW DestroyWindow GetForegroundWindow PostMessageW RegisterTouchWindow IsWindow AdjustWindowRectEx GetActiveWindow UpdateWindow InvalidateRect SetCursorPos CreateMenu GetUpdateRect ValidateRect GetMonitorInfoW MonitorFromWindow GetCursorPos GetSystemMetrics CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW FillRect MonitorFromRect ClientToScreen GetClientRect GetWindowLongW ScreenToClient

comctl32

DefSubclassProc SetWindowSubclass RemoveWindowSubclass TaskDialogIndirect

ole32

CoUninitialize OleInitialize RegisterDragDrop RevokeDragDrop CoCreateInstance CoTaskMemFree CoInitialize CoTaskMemAlloc CoCreateFreeThreadedMarshaler CoInitializeEx

shlwapi

SHCreateMemStream

gdi32

CombineRgn BitBlt SelectObject DeleteDC CreateRectRgn CreateCompatibleDC DeleteObject CreateSolidBrush SetTextColor SetBkMode GetDeviceCaps CreateDIBSection

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute

shell32

SHAppBarMessage DragFinish DragQueryFileW ShellExecuteW ShellExecuteExW SHGetKnownFolderPath SHOpenFolderAndSelectItems ord155 ord190

oleaut32

SysStringLen SysFreeString SetErrorInfo GetErrorInfo

ws2_32

getaddrinfo freeaddrinfo WSAStartup WSACleanup closesocket getsockname accept getsockopt getpeername WSASocketW connect ioctlsocket listen shutdown recv send WSASend setsockopt WSAIoctl WSAGetLastError bind

bcrypt

BCryptGenRandom

api-ms-win-crt-string-l1-1-0

strncmp strcmp wcscmp wcslen strlen strcpy_s _wcsicmp strcspn strspn

api-ms-win-crt-math-l1-1-0

__setusermatherr trunc log floor round roundf pow

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi

api-ms-win-crt-heap-l1-1-0

calloc free _msize malloc _callnewh _set_new_mode realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_endthreadex terminate _crt_atexit _register_onexit_function _initialize_onexit_table _set_app_type _seh_filter_exe _configure_narrow_argv _beginthreadex abort _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _initialize_narrow_environment _exit exit _initterm_e _initterm _get_initial_narrow_environment

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_261f51aa257cc588e39a4eba8bb2444c_akira_cobalt-strike_glassworm_rusty-stealer_satacom

bcryptprimitives

ntdll

advapi32

kernel32

api-ms-win-core-synch-l1-2-0

user32

comctl32

ole32

shlwapi

gdi32

dwmapi

shell32

oleaut32

ws2_32

bcrypt

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic