662d98d708e6f43da90ee00c974d3268ba658890a24a24561e8b8e59ced98313

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 22:27

Target
2026-07-22_1dc87e6a547abd64483995096a0f558d_akira_cobalt-strike_rusty-stealer_satacom.exe
Size 1.7MB
Sample260722-2da5jach89
SHA256 662d98d708e6f43da90ee00c974d3268ba658890a24a24561e8b8e59ced98313
MD5 1dc87e6a547abd64483995096a0f558d
SHA1 0b634145ce25215e1dcda80773aa505bc0b88e5b
SHA512 d39c15f4ebbeba064fab37c4e4d330c019d540a55ab61d47c4447b0cf52ae79d25cce59aa367b72ac32bcdf5f2e58db584a823d4411c6e84452f184fb3a30a06
SSDEEP 24576:2ZFXwUHtj9CS43KiobsQCX2obgdFMyVIH06iydY:09N5a3obZHnIU6i
TLSH
T1E2857D17E98250ADC07AC2B5D3475233B634B8C9532069FF13E482212DDABE4A77F75A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
5540	FontCacheHost.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1324 wrote to memory of 5540	1324	2026-07-22_1dc87e6a547abd64483995096a0f558d_akira_cobalt-strike_rusty-stealer_satacom.exe	89

C:\Users\Admin\AppData\Local\Temp\2026-07-22_1dc87e6a547abd64483995096a0f558d_akira_cobalt-strike_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-22_1dc87e6a547abd64483995096a0f558d_akira_cobalt-strike_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1324
- C:\Users\Admin\AppData\Local\Microsoft\Fonts\Cache\FontCacheHost.exe
  "C:\Users\Admin\AppData\Local\Microsoft\Fonts\Cache\FontCacheHost.exe" -s
  2⤵
  - Executes dropped EXE
  PID:5540

FontCacheHost.exe

Path C:\Users\Admin\AppData\Local\Microsoft\Fonts\Cache\FontCacheHost.exe
Size 1.7MB
SHA256 662d98d708e6f43da90ee00c974d3268ba658890a24a24561e8b8e59ced98313
MD5 1dc87e6a547abd64483995096a0f558d
SHA1 0b634145ce25215e1dcda80773aa505bc0b88e5b
SHA512 d39c15f4ebbeba064fab37c4e4d330c019d540a55ab61d47c4447b0cf52ae79d25cce59aa367b72ac32bcdf5f2e58db584a823d4411c6e84452f184fb3a30a06
SSDEEP 24576:2ZFXwUHtj9CS43KiobsQCX2obgdFMyVIH06iydY:09N5a3obZHnIU6i
TLSH
T1E2857D17E98250ADC07AC2B5D3475233B634B8C9532069FF13E482212DDABE4A77F75A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download