2026-07-30_b53cb7a90487ee26abb8bbc86f75318d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_b53cb7a90487ee26abb8bbc86f75318d_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 24.5MB
Sample260730-fpq48stvbv
SHA256 e2a8dd0d83acd9859a1cfb25f07e4c93efd553408f17c8c47674864b537fad51
MD5 b53cb7a90487ee26abb8bbc86f75318d
SHA1 32e61e7356f8e24964a0b1a9be2f01461354898f
SHA512 711b9f5d89efbd88241e280c6fff8e530ab142411d7ac36e3e488af0157c9476f1135e8a593ea0b326e56f4cac885b815522d63c6a39884baa05497d66e32dca
SSDEEP 196608:LhbMnEeVy3n2ioyD9hpo7XJeHh9HIdiFl:Nbmyuyhhpo7XJeHzHIA
TLSH
T1F747C626767964D9D17BC0B882838E62AE2174DD07393BF749D082762F24EF8AD3C754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_b53cb7a90487ee26abb8bbc86f75318d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-07-30_b53cb7a90487ee26abb8bbc86f75318d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 24.5MB

2026-07-30_b53cb7a90487ee26abb8bbc86f75318d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 0457e2c14802ce123b5282fa560c43c4
SHA256 e2a8dd0d83acd9859a1cfb25f07e4c93efd553408f17c8c47674864b537fad51
MD5 b53cb7a90487ee26abb8bbc86f75318d
SHA1 32e61e7356f8e24964a0b1a9be2f01461354898f
SHA512 711b9f5d89efbd88241e280c6fff8e530ab142411d7ac36e3e488af0157c9476f1135e8a593ea0b326e56f4cac885b815522d63c6a39884baa05497d66e32dca
SSDEEP 196608:LhbMnEeVy3n2ioyD9hpo7XJeHh9HIdiFl:Nbmyuyhhpo7XJeHzHIA
TLSH
T1F747C626767964D9D17BC0B882838E62AE2174DD07393BF749D082762F24EF8AD3C754
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18474768

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

integration-ea751d73dac9d625.pdb

kernel32

SetFileCompletionNotificationModes PostQueuedCompletionStatus GetConsoleScreenBufferInfo GetStdHandle SetConsoleTextAttribute GetQueuedCompletionStatusEx CloseHandle GetOverlappedResult ReadFile SetHandleInformation CreateIoCompletionPort GetSystemTimeAsFileTime InitializeSListHead GetModuleHandleA WaitForMultipleObjects FormatMessageW GetModuleHandleW GetFileType GetFileAttributesW GetConsoleOutputCP GetConsoleMode WriteConsoleW MultiByteToWideChar GetModuleFileNameW HeapAlloc GetFinalPathNameByHandleW ReleaseMutex CreateMutexA LoadLibraryA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess SetUnhandledExceptionFilter FindClose FindFirstFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetEnvironmentStringsW GetExitCodeProcess CreateProcessW GetProcAddress RtlVirtualUnwind CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId MoveFileExW SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

advapi32

GetUserNameW SystemFunction036

shell32

SHGetKnownFolderPath

combase

CoTaskMemFree

ws2_32

shutdown send recv bind WSAIoctl connect ioctlsocket WSAGetLastError setsockopt getsockopt closesocket WSASocketW WSAStartup WSACleanup freeaddrinfo getaddrinfo

ntdll

NtCancelIoFileEx NtReadFile NtDeviceIoControlFile NtWriteFile NtOpenFile RtlNtStatusToDosError NtCreateFile NtCreateNamedPipeFile

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

userenv

GetUserProfileDirectoryW

vcruntime140

memcpy __CxxFrameHandler3 _CxxThrowException memset __current_exception_context __C_specific_handler __current_exception memcmp memmove

api-ms-win-crt-math-l1-1-0

floor fmod log __setusermatherr cos exp sin tan round log10 trunc pow ceil atan asin acos

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _get_initial_narrow_environment _initterm _c_exit _cexit _crt_atexit exit _initterm_e terminate __p___argv __p___argc _exit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_b53cb7a90487ee26abb8bbc86f75318d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

kernel32

api-ms-win-core-synch-l1-2-0

advapi32

shell32

combase

ws2_32

ntdll

bcryptprimitives

bcrypt

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic