General
- Target 2026-07-31_ef9800fa627d3e90bfab8101ec25fbb6_akira_cobalt-strike_funksec_glassworm_quasar-rat_rusty-stealer_satacom_vidar
- Size 14.5MB
- Sample260731-cvfnxabc36
- SHA256 a23c437a7c4fc427b5b725f9d4da51029dc1995bb63ad442efecd545d71a5bbe
- MD5 ef9800fa627d3e90bfab8101ec25fbb6
- SHA1 6865c7dcd07a071f51b4b49949cb0e68c7c5d6a8
- SHA512 27ca3ec22e1a2bb69ad46343c228468d026ee8305ba32dadf3e27a6ce00077856f7fde0c7ee01d7cd97048505026bd10297083e4798d29304207cb2fd4052ae4
- SSDEEP 98304:gGUSbPKw+3KovGpK/IX9SPs33ryWXsfRw89bqWZylXuvOeEiZjp+m+iSWypEO8Fs:4SuHKoOw/ISbJpFBvm7j
- TLSH T180E6D5257A5A996CD09BC4B4834B8A72497130CB0B39B9FF449492383F6DBF46F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_ef9800fa627d3e90bfab8101ec25fbb6_akira_cobalt-strike_funksec_glassworm_quasar-rat_rusty-stealer_satacom_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_ef9800fa627d3e90bfab8101ec25fbb6_akira_cobalt-strike_funksec_glassworm_quasar-rat_rusty-stealer_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_ef9800fa627d3e90bfab8101ec25fbb6_akira_cobalt-strike_funksec_glassworm_quasar-rat_rusty-stealer_satacom_vidar
- Size 14.5MB
- SHA256 a23c437a7c4fc427b5b725f9d4da51029dc1995bb63ad442efecd545d71a5bbe
- MD5 ef9800fa627d3e90bfab8101ec25fbb6
- SHA1 6865c7dcd07a071f51b4b49949cb0e68c7c5d6a8
- SHA512 27ca3ec22e1a2bb69ad46343c228468d026ee8305ba32dadf3e27a6ce00077856f7fde0c7ee01d7cd97048505026bd10297083e4798d29304207cb2fd4052ae4
- SSDEEP 98304:gGUSbPKw+3KovGpK/IX9SPs33ryWXsfRw89bqWZylXuvOeEiZjp+m+iSWypEO8Fs:4SuHKoOw/ISbJpFBvm7j
- TLSH T180E6D5257A5A996CD09BC4B4834B8A72497130CB0B39B9FF449492383F6DBF46F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled