General
- Target 2026-07-29_3b5239767e5327f488ae19e72741196a_akira_cobalt-strike_coinminer_rusty-stealer_satacom
- Size 1.3MB
- Sample260729-m98ckseq6x
- SHA256 1161cd2dccc2ebc6196e8657028934a68facc3937225525a8785cfacad3465e9
- MD5 3b5239767e5327f488ae19e72741196a
- SHA1 9ad5cce1a83034eab0bd50406dc084bc24638b45
- SHA512 26f466bed41140c6fab7122e30fd18c83095a2007d4a80fe030a74a2cf5fec39b1976621761787e5e67a72c32a42f875439b263f1754696146d6febde4e9dae2
- SSDEEP 24576:rJsWPngv+mcP6SD45Klu6uy+6FM3VIH06iyi:+enoBcP6SOKlu5FkYIU6i
- TLSH T1D0557C47E66581F8C5AEC07CC757A536FA2278894B34A2DB27D04B093E26FD0AB3D750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_3b5239767e5327f488ae19e72741196a_akira_cobalt-strike_coinminer_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_3b5239767e5327f488ae19e72741196a_akira_cobalt-strike_coinminer_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_3b5239767e5327f488ae19e72741196a_akira_cobalt-strike_coinminer_rusty-stealer_satacom
- Size 1.3MB
- SHA256 1161cd2dccc2ebc6196e8657028934a68facc3937225525a8785cfacad3465e9
- MD5 3b5239767e5327f488ae19e72741196a
- SHA1 9ad5cce1a83034eab0bd50406dc084bc24638b45
- SHA512 26f466bed41140c6fab7122e30fd18c83095a2007d4a80fe030a74a2cf5fec39b1976621761787e5e67a72c32a42f875439b263f1754696146d6febde4e9dae2
- SSDEEP 24576:rJsWPngv+mcP6SD45Klu6uy+6FM3VIH06iyi:+enoBcP6SOKlu5FkYIU6i
- TLSH T1D0557C47E66581F8C5AEC07CC757A536FA2278894B34A2DB27D04B093E26FD0AB3D750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.