General
- Target 2026-07-30_6210f5a593b3822307836e47d3eb86ea_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 22.9MB
- Sample260730-dx7e3sydma
- SHA256 41e52f093988fffa084dda8b770f9cbb43915a026a1e69ff19936d69eee8b8a5
- MD5 6210f5a593b3822307836e47d3eb86ea
- SHA1 b59a3b5b1920618fae924bebd41f1c5245aed7bb
- SHA512 1507bf30c8a01b5f83f6f78e9df14e1032d36b08fe3c5d8e3861521a3947ebe3d2a65e8841ec24841d7983b7fdc8549997cc1f84cb03a5f6551dde49096345d2
- SSDEEP 393216:Wr2Twx+u2WvsAPqcqnqaooLaTrULJJBf44sAvGmGRqCLSTy:K2Twx+u2WvsAPqcqloobD7GRuTy
- TLSH T1F23749257B5A9968D09BC47483478A634A7130DB0B35BAFF448496382F7EBF56F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-30_6210f5a593b3822307836e47d3eb86ea_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_6210f5a593b3822307836e47d3eb86ea_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_6210f5a593b3822307836e47d3eb86ea_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 22.9MB
- SHA256 41e52f093988fffa084dda8b770f9cbb43915a026a1e69ff19936d69eee8b8a5
- MD5 6210f5a593b3822307836e47d3eb86ea
- SHA1 b59a3b5b1920618fae924bebd41f1c5245aed7bb
- SHA512 1507bf30c8a01b5f83f6f78e9df14e1032d36b08fe3c5d8e3861521a3947ebe3d2a65e8841ec24841d7983b7fdc8549997cc1f84cb03a5f6551dde49096345d2
- SSDEEP 393216:Wr2Twx+u2WvsAPqcqnqaooLaTrULJJBf44sAvGmGRqCLSTy:K2Twx+u2WvsAPqcqloobD7GRuTy
- TLSH T1F23749257B5A9968D09BC47483478A634A7130DB0B35BAFF448496382F7EBF56F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.