General
- Target 2026-07-29_c640ae6e40ca47e428880b1229855371_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 905KB
- Sample260729-cyldkavsav
- SHA256 537841ecfe67666496b36fbe4a9170a229843b35c00f068ebf748750673a262b
- MD5 c640ae6e40ca47e428880b1229855371
- SHA1 b823e1ddd773953435cae41b12f4c2b96c8341da
- SHA512 a3dd1f273c2a097fe57f7d9c3b0c06efac6ac9a685099930ce5368814b68aeb40fbb6b7aee3b788e8499e76b48f25c46694aa5f370b0de901f6fe3ef44d41b9a
- SSDEEP 12288:3O0ZKUhR/fZ0EF9rD36gq2mpKAIbKqPxUBa+HBs557Uyy9fNcm3x9w88C72myVld:3O0Z9hxFF9X36C7VufNcm3x9we/
- TLSH T1AC156B0BE59465ECD85EC075832A83E2FB2FF48A071179EB81F453243F55AA81E3E764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_c640ae6e40ca47e428880b1229855371_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_c640ae6e40ca47e428880b1229855371_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_c640ae6e40ca47e428880b1229855371_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 905KB
- SHA256 537841ecfe67666496b36fbe4a9170a229843b35c00f068ebf748750673a262b
- MD5 c640ae6e40ca47e428880b1229855371
- SHA1 b823e1ddd773953435cae41b12f4c2b96c8341da
- SHA512 a3dd1f273c2a097fe57f7d9c3b0c06efac6ac9a685099930ce5368814b68aeb40fbb6b7aee3b788e8499e76b48f25c46694aa5f370b0de901f6fe3ef44d41b9a
- SSDEEP 12288:3O0ZKUhR/fZ0EF9rD36gq2mpKAIbKqPxUBa+HBs557Uyy9fNcm3x9w88C72myVld:3O0Z9hxFF9X36C7VufNcm3x9we/
- TLSH T1AC156B0BE59465ECD85EC075832A83E2FB2FF48A071179EB81F453243F55AA81E3E764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Modifies RDP port number used by Windows
-
Checks whether UAC is enabled
-
Drops file in System32 directory