General
- Target 2026-07-29_073b2a2c8ccc87e6a4a1670a11b8eab6_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 1.7MB
- Sample260730-ch1tbabl91
- SHA256 122913f6141ab913a91251a63315c13548b0d358fefbb6024ce3e92a2761cde7
- MD5 073b2a2c8ccc87e6a4a1670a11b8eab6
- SHA1 e741a6839ab4291b205bfcb84a568c5536688223
- SHA512 2f35946d2faa5998f26c92da5bde23f5990980e5fed71d9a8099d448964db7367868a7669bb3affe7ff78e7bdd9402abe14b02e9678138a7fe49cb4b0ec770d4
- SSDEEP 24576:4Aij5UHJ229McSOxbuaWa0a9qaL/Ar82vMnV:4A6229cLAFDa9q0Yr8d
- TLSH T1E98519257B5E99ACC15AC474834A8A665A3570CB0B35B8FF21CC45782FAEAF42F3C354
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_073b2a2c8ccc87e6a4a1670a11b8eab6_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_073b2a2c8ccc87e6a4a1670a11b8eab6_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_073b2a2c8ccc87e6a4a1670a11b8eab6_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 1.7MB
- SHA256 122913f6141ab913a91251a63315c13548b0d358fefbb6024ce3e92a2761cde7
- MD5 073b2a2c8ccc87e6a4a1670a11b8eab6
- SHA1 e741a6839ab4291b205bfcb84a568c5536688223
- SHA512 2f35946d2faa5998f26c92da5bde23f5990980e5fed71d9a8099d448964db7367868a7669bb3affe7ff78e7bdd9402abe14b02e9678138a7fe49cb4b0ec770d4
- SSDEEP 24576:4Aij5UHJ229McSOxbuaWa0a9qaL/Ar82vMnV:4A6229cLAFDa9q0Yr8d
- TLSH T1E98519257B5E99ACC15AC474834A8A665A3570CB0B35B8FF21CC45782FAEAF42F3C354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Windows Management Instrumentation
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1