General
- Target 2026-08-01_fa7429d790a9bbb35a08d0569bd9dd38_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 1.8MB
- Sample260801-3cmydahn8s
- SHA256 90b321131e646d8a22e791d77baf90cf1b33d20b3638d12fbb0037f2a9f36dc2
- MD5 fa7429d790a9bbb35a08d0569bd9dd38
- SHA1 462a0e3d62aed96b2e0e1a91c9b55f2d09d3ca90
- SHA512 184775ba4268c84af746483e8df2e00b07e2fc1d876224f29ba8fb8e999f4ce7c4cf356cf6fda29eb9ad2bc6e88a5b221a7428de742e980d400b6c904e235190
- SSDEEP 24576:nWRdYVH033bDoOkBW7s/IB7ntydycPrz2AS7G0+N6y1oFfW0m9:ncYde3bHg67ntVy12DK
- TLSH T1BF856B43F6A2C0F8C26AC0788716A133EA327C9D073576EB67D45A253E62FD06A3D754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_fa7429d790a9bbb35a08d0569bd9dd38_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_fa7429d790a9bbb35a08d0569bd9dd38_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_fa7429d790a9bbb35a08d0569bd9dd38_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 1.8MB
- SHA256 90b321131e646d8a22e791d77baf90cf1b33d20b3638d12fbb0037f2a9f36dc2
- MD5 fa7429d790a9bbb35a08d0569bd9dd38
- SHA1 462a0e3d62aed96b2e0e1a91c9b55f2d09d3ca90
- SHA512 184775ba4268c84af746483e8df2e00b07e2fc1d876224f29ba8fb8e999f4ce7c4cf356cf6fda29eb9ad2bc6e88a5b221a7428de742e980d400b6c904e235190
- SSDEEP 24576:nWRdYVH033bDoOkBW7s/IB7ntydycPrz2AS7G0+N6y1oFfW0m9:ncYde3bHg67ntVy12DK
- TLSH T1BF856B43F6A2C0F8C26AC0788716A133EA327C9D073576EB67D45A253E62FD06A3D754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.