General
- Target 2026-07-22_36b54614e3aeb237b6cb452d50052735_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 26.6MB
- Sample260723-ccdftsfb47
- SHA256 9bf17729dd6095dbfb7f033e2492f326b20d64b42ab7429f102fecd4fed24224
- MD5 36b54614e3aeb237b6cb452d50052735
- SHA1 768e42d8cfdd905a8e8d998b7f7374cf298850cb
- SHA512 2e7d9e5c09ff859cd6be963d13001cb2b9d77ffb8a35370e49de39295c3885e790eed2f240ec3e3f50ce47072af3e3df3d991f6c97beb442b6925a289c59879a
- SSDEEP 98304:17UW+kSU9KFKAcRHs/aYMkJwrNuq8j2tNGAIOlIdmLaNJDLJgVE6HtCez/Amdkx+:NAcRXUWG3RJyzuxLbkIXru
- TLSH T11E570725BA5A996CD09AC474834B8A725A3130DB0B35B9FF44D492383F6DBF46F38319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_36b54614e3aeb237b6cb452d50052735_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_36b54614e3aeb237b6cb452d50052735_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_36b54614e3aeb237b6cb452d50052735_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 26.6MB
- SHA256 9bf17729dd6095dbfb7f033e2492f326b20d64b42ab7429f102fecd4fed24224
- MD5 36b54614e3aeb237b6cb452d50052735
- SHA1 768e42d8cfdd905a8e8d998b7f7374cf298850cb
- SHA512 2e7d9e5c09ff859cd6be963d13001cb2b9d77ffb8a35370e49de39295c3885e790eed2f240ec3e3f50ce47072af3e3df3d991f6c97beb442b6925a289c59879a
- SSDEEP 98304:17UW+kSU9KFKAcRHs/aYMkJwrNuq8j2tNGAIOlIdmLaNJDLJgVE6HtCez/Amdkx+:NAcRXUWG3RJyzuxLbkIXru
- TLSH T11E570725BA5A996CD09AC474834B8A725A3130DB0B35B9FF44D492383F6DBF46F38319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.