General
- Target 2026-07-24_7f76b1cc5e7afc43a2cbb82a26b6a10b_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom
- Size 1.2MB
- Sample260724-k87csabl8y
- SHA256 1bedf949ca22b767e4993b296674a03e31db1599e6be074b8051447ad4335ad1
- MD5 7f76b1cc5e7afc43a2cbb82a26b6a10b
- SHA1 40ee8f623054e583e62f284d87d55a89a37e6dfb
- SHA512 e0c2dfa999288f5ba441dcc0cd1bcaa1ddd07bb11f7a8171adf2dc85112d8a93db51f9a7f96f20000320e26ec5b11a37c0bb3acf346ab973244ea7f37750bfb4
- SSDEEP 24576:sII1hXI83IXR1xON3ktcPne87HtO/DF1+9codjeWyZxeCE9:HI1hXI8YX/NqR2TPod5
- TLSH T18545BF03F64685ECDA5AC07D872682326532B8C9473166EB21897F3C3D67ED25E7E324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_7f76b1cc5e7afc43a2cbb82a26b6a10b_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_7f76b1cc5e7afc43a2cbb82a26b6a10b_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom
- Size 1.2MB
- SHA256 1bedf949ca22b767e4993b296674a03e31db1599e6be074b8051447ad4335ad1
- MD5 7f76b1cc5e7afc43a2cbb82a26b6a10b
- SHA1 40ee8f623054e583e62f284d87d55a89a37e6dfb
- SHA512 e0c2dfa999288f5ba441dcc0cd1bcaa1ddd07bb11f7a8171adf2dc85112d8a93db51f9a7f96f20000320e26ec5b11a37c0bb3acf346ab973244ea7f37750bfb4
- SSDEEP 24576:sII1hXI83IXR1xON3ktcPne87HtO/DF1+9codjeWyZxeCE9:HI1hXI8YX/NqR2TPod5
- TLSH T18545BF03F64685ECDA5AC07D872682326532B8C9473166EB21897F3C3D67ED25E7E324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1