2026-07-28_526e345776ace0f6ec70fcaa9ac92ef0_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-28_526e345776ace0f6ec70fcaa9ac92ef0_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 4.9MB
Sample260729-bl9d7as1ex
SHA256 7a431dbae95c9d073552857c1fda0f070a2c12d6eb820a4bb0580482c7722c74
MD5 526e345776ace0f6ec70fcaa9ac92ef0
SHA1 7ba72cb147c8a4ff5d000a3d3f76b6d431059e00
SHA512 7c3bf6a140f4c6d79a164737b602b10a77f4ea8791c6092912503e143570dd69d79396782e8a020237c39b203b927738ead8be1625dc9c0211c6449089c46f02
SSDEEP 49152:Is5jTf7X1HX7Q6ocHIuSbK6g8d0B3Sd0zd9mGlqJQWEEQIQ4AkrSr4Rzq2J61UN9:/f/dHwbGmZQIARWnc1a/Y4+q8K
TLSH
T186363922BA5A98ADC15AC47483468A725A3130DB0F35B9FF44C496793F79AF41F3C368
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-28_526e345776ace0f6ec70fcaa9ac92ef0_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-07-28_526e345776ace0f6ec70fcaa9ac92ef0_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 4.9MB

2026-07-28_526e345776ace0f6ec70fcaa9ac92ef0_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 7c05d9313e80a368b773e842fe336951
SHA256 7a431dbae95c9d073552857c1fda0f070a2c12d6eb820a4bb0580482c7722c74
MD5 526e345776ace0f6ec70fcaa9ac92ef0
SHA1 7ba72cb147c8a4ff5d000a3d3f76b6d431059e00
SHA512 7c3bf6a140f4c6d79a164737b602b10a77f4ea8791c6092912503e143570dd69d79396782e8a020237c39b203b927738ead8be1625dc9c0211c6449089c46f02
SSDEEP 49152:Is5jTf7X1HX7Q6ocHIuSbK6g8d0B3Sd0zd9mGlqJQWEEQIQ4AkrSr4Rzq2J61UN9:/f/dHwbGmZQIARWnc1a/Y4+q8K
TLSH
T186363922BA5A98ADC15AC47483468A725A3130DB0F35B9FF44C496793F79AF41F3C368
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3482944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

lossless.pdb

kernel32

GetOverlappedResult WriteFile CancelIoEx GetQueuedCompletionStatusEx PostQueuedCompletionStatus ReadFile CreateIoCompletionPort SetHandleInformation Sleep GetModuleHandleA DuplicateHandle SetFileCompletionNotificationModes GetCurrentProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW GetProcessHeap HeapFree FormatMessageW SetConsoleCtrlHandler RtlVirtualUnwind SetNamedPipeHandleState SetConsoleMode CompareStringOrdinal FreeEnvironmentStringsW WaitForSingleObject GetConsoleMode SleepEx SetLastError GetFullPathNameW CreateFileW GetConsoleScreenBufferInfo SetFileInformationByHandle SetFileTime HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetSystemTimeAsFileTime GetCurrentProcessId ReadFileEx RtlCaptureContext RtlLookupFunctionEntry GetSystemTimePreciseAsFileTime CloseHandle CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetEnvironmentStringsW GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW InitializeSListHead lstrlenW GetModuleFileNameW FindFirstFileExW FindClose ExitProcess GetSystemInfo SwitchToThread WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex GetFinalPathNameByHandleW SetThreadErrorMode HeapAlloc ReadConsoleW MultiByteToWideChar WriteConsoleW GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer GetFileAttributesW GetFileType GetModuleHandleW FreeLibrary WaitForMultipleObjects GetProcAddress GetLastError GetCurrentThreadId SetConsoleTextAttribute WriteFileEx LoadLibraryExW SetUnhandledExceptionFilter

ws2_32

WSAGetLastError WSACleanup freeaddrinfo WSAIoctl setsockopt WSAStartup shutdown getaddrinfo bind WSASocketW sendto send recv connect ioctlsocket WSASend getsockopt recvfrom getsockname getpeername closesocket

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ntdll

NtCreateNamedPipeFile NtDeviceIoControlFile RtlNtStatusToDosError NtCancelIoFileEx NtOpenFile NtCreateFile NtReadFile NtWriteFile

bcryptprimitives

ProcessPrng

winmm

timeBeginPeriod

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

vcruntime140

__CxxFrameHandler3 memcpy memmove memcmp memset _CxxThrowException __C_specific_handler __current_exception __current_exception_context

api-ms-win-crt-math-l1-1-0

pow __setusermatherr round

api-ms-win-crt-runtime-l1-1-0

_initterm_e _get_initial_narrow_environment _seh_filter_exe terminate _crt_atexit _register_onexit_function _initialize_onexit_table exit _configure_narrow_argv _initterm _register_thread_local_exe_atexit_callback _set_app_type _c_exit _cexit __p___argv __p___argc _exit _initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-28_526e345776ace0f6ec70fcaa9ac92ef0_akira_cobalt-strike_glassworm_rusty-stealer_satacom

kernel32

ws2_32

api-ms-win-core-synch-l1-2-0

ntdll

bcryptprimitives

winmm

bcrypt

advapi32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic