6e9dc5c71a89b6f854b19b021d14c3893d6d4139d78858b4d7c5c4e34f84d244 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

2026-07-31...om.exe

windows10-2004-x64

6

2026-07-31...om.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-31_9826dbd8660ba586ffc15ec33bb16b04_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 37.8MB
Sample260731-k5tbrazvbv
SHA256 6e9dc5c71a89b6f854b19b021d14c3893d6d4139d78858b4d7c5c4e34f84d244
MD5 9826dbd8660ba586ffc15ec33bb16b04
SHA1 9a89558f0a4423f035676c7c000eda1a1202d71b
SHA512 8b7388a688da1c970fac4950423f46f38bef5b50214f0283aad8f61bd4daccd292a597e6f3e7455106972393baf5e666a614bee1b98702a415b2c2f99eb2bb8d
SSDEEP 196608:sy8VMqZ1+s9uDEEHtOYseDj1UyZnp/5p7iDE3+GOCEuKRPHTP0RoLNQRsaDRda:syeDOUmZnp//i8+CnGPHTP0RoGRsi/
TLSH
T14997F815BA5B996CD04BC4B083578A660A3034DF0A35A9BF55C4A2383F7E7F56F2831E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-31_9826dbd8660ba586ffc15ec33bb16b04_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

17 signatures

150 seconds

defense_evasion discovery persistence trojan

Behavioral task

behavioral2

Sample

2026-07-31_9826dbd8660ba586ffc15ec33bb16b04_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

defense_evasion discovery persistence trojan

Malware Config

Targets

- Target
  2026-07-31_9826dbd8660ba586ffc15ec33bb16b04_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 37.8MB
- SHA256 6e9dc5c71a89b6f854b19b021d14c3893d6d4139d78858b4d7c5c4e34f84d244
- MD5 9826dbd8660ba586ffc15ec33bb16b04
- SHA1 9a89558f0a4423f035676c7c000eda1a1202d71b
- SHA512 8b7388a688da1c970fac4950423f46f38bef5b50214f0283aad8f61bd4daccd292a597e6f3e7455106972393baf5e666a614bee1b98702a415b2c2f99eb2bb8d
- SSDEEP 196608:sy8VMqZ1+s9uDEEHtOYseDj1UyZnp/5p7iDE3+GOCEuKRPHTP0RoLNQRsaDRda:syeDOUmZnp//i8+CnGPHTP0RoGRsi/
- TLSH
  T14997F815BA5B996CD04BC4B083578A660A3034DF0A35A9BF55C4A2383F7E7F56F2831E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Ignore Process Interrupts

Modify Registry

Credential Access

Discovery

Network Share Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistencetrojan

behavioral2

defense_evasiondiscoverypersistencetrojan

© 2018-2026

Terms | Privacy