General
- Target 2026-07-30_de30f5663db1f19027ccbe2bae6c0ea4_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 3.8MB
- Sample260730-y5eegsfb34
- SHA256 e5ef384ea97665acfd93ed3a344b5c8185aad8dcb545ec9499c19d60a7820995
- MD5 de30f5663db1f19027ccbe2bae6c0ea4
- SHA1 4e24494ce00ad54b840afaf9243f9fbfedd1b8f0
- SHA512 efc78bf87cfeb218d16ffc4b42471b8451bb9a15506637a71619eb0350eacca5a15414443d1ef400ca8abdf40fece34e15f4f5036c7cf1c9c3079b5c1beb8dc4
- SSDEEP 49152:IIQ1wvjapQ1a1ZAsmN2vBY2LCItM1mJfSc+wg5n9b++jevdNmC1Is1fL1vQ+eocM:I60BKN1McwgR9Mg+bnuUz
- TLSH T16A068D43FB9982F9C05EC178C7569223EB72B8891620B29F27D44B223F67B605F5D349
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-30_de30f5663db1f19027ccbe2bae6c0ea4_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_de30f5663db1f19027ccbe2bae6c0ea4_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_de30f5663db1f19027ccbe2bae6c0ea4_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 3.8MB
- SHA256 e5ef384ea97665acfd93ed3a344b5c8185aad8dcb545ec9499c19d60a7820995
- MD5 de30f5663db1f19027ccbe2bae6c0ea4
- SHA1 4e24494ce00ad54b840afaf9243f9fbfedd1b8f0
- SHA512 efc78bf87cfeb218d16ffc4b42471b8451bb9a15506637a71619eb0350eacca5a15414443d1ef400ca8abdf40fece34e15f4f5036c7cf1c9c3079b5c1beb8dc4
- SSDEEP 49152:IIQ1wvjapQ1a1ZAsmN2vBY2LCItM1mJfSc+wg5n9b++jevdNmC1Is1fL1vQ+eocM:I60BKN1McwgR9Mg+bnuUz
- TLSH T16A068D43FB9982F9C05EC178C7569223EB72B8891620B29F27D44B223F67B605F5D349
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.