659274b4796a715b863b879aca51c1784cf8745e25a7f4efb906241d42350b0c

Analysis

max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/07/2026, 01:02

Target
2026-07-23_f6aa19de1ce275a73967d73e89423e7c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 8.6MB
Sample260724-bdvwtsel7t
SHA256 659274b4796a715b863b879aca51c1784cf8745e25a7f4efb906241d42350b0c
MD5 f6aa19de1ce275a73967d73e89423e7c
SHA1 8ca16f03b0c525ff83eb6d202b9b5284ddf139e1
SHA512 2f4db7cdb262d9c1f1487ec032590bf26079b0e63152594dd85294ede8f62067fe323005fb1af3ffd64ef70afa0260348045f9738b0323bb48bd5d5108b500d0
SSDEEP 98304:dKDZZRcyI7uvP65Pz9JeIWyuoAjhB5+3og5HXZn7Ws9LjR0mI/RCn+IOO0NZi:oNcyElHd2R4l4i
TLSH
T1EE963A027B9F59A9D199C874C34B8BB38B2230CB1A36B5BF45D601253F7DAB11E2D319
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

flow	ioc
1	discord.com
6	discord.com

C:\Users\Admin\AppData\Local\Temp\2026-07-23_f6aa19de1ce275a73967d73e89423e7c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-23_f6aa19de1ce275a73967d73e89423e7c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
PID:956

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact