General
- Target 2026-07-31_fe89564f7be14f9a90105b3276b2a3c1_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 21.4MB
- Sample260731-kk4xraff34
- SHA256 618a6652c02e109e2bc354e0c57f564dece4c6e20076c88eed7319a870368064
- MD5 fe89564f7be14f9a90105b3276b2a3c1
- SHA1 3f8612fc72190f060c828f5565141b04bf951ce5
- SHA512 3dee976ab07d1a4fbc783efc48fdc2536eb4b9b0235d3d8c4ee2a6abb5c3aaccfaf398bd4a800db056fff003f9d58ab2ef5e5d090db0109af2ef60719929487a
- SSDEEP 393216:eR1OtiboTbcNx1FqeJkpaKFQMKW7N1Ke:eR1OtiboTbcNx1FqeJkpaVMye
- TLSH T151370825BB5B996CD09AC4B083468A734A3034DB0B35B9FF44D492382F7DBF56F28259
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_fe89564f7be14f9a90105b3276b2a3c1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_fe89564f7be14f9a90105b3276b2a3c1_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_fe89564f7be14f9a90105b3276b2a3c1_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 21.4MB
- SHA256 618a6652c02e109e2bc354e0c57f564dece4c6e20076c88eed7319a870368064
- MD5 fe89564f7be14f9a90105b3276b2a3c1
- SHA1 3f8612fc72190f060c828f5565141b04bf951ce5
- SHA512 3dee976ab07d1a4fbc783efc48fdc2536eb4b9b0235d3d8c4ee2a6abb5c3aaccfaf398bd4a800db056fff003f9d58ab2ef5e5d090db0109af2ef60719929487a
- SSDEEP 393216:eR1OtiboTbcNx1FqeJkpaKFQMKW7N1Ke:eR1OtiboTbcNx1FqeJkpaVMye
- TLSH T151370825BB5B996CD09AC4B083468A734A3034DB0B35B9FF44D492382F7DBF56F28259
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.