2026-08-01_80de1a23a80d5c1cdee56044bfc1f69e_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_80de1a23a80d5c1cdee56044bfc1f69e_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom
Size 17.8MB
Sample260801-bfmm8stycx
SHA256 856629c618818d6453d8d5a1e6fb948adea0360cdff027e035b3524dca6bae39
MD5 80de1a23a80d5c1cdee56044bfc1f69e
SHA1 f10af3a21800cbbf72d23b16d02cc7935223e859
SHA512 7f144310848ee2a62c0708f15098b5e818caa0a7a122eb48d8e6468217c1782baa0440033384bf0819f7f02fd7d6e6bc9a67088e44b74052ff5eecb8e2cfdf1c
SSDEEP 98304:MsxRC7HIDnGXt34Xoh2DBk+JWdpFjxPHFXjrrJ4rL6Rf/CGEfO7hxk5vGb1mxbah:M2RC7oGXt3rcGHDlLuQ7ho0
TLSH
T1F0171A157A5A69EDC55AC474834B8A731A3034CF0B35BAFF44C486793FAAAF41F38618
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_80de1a23a80d5c1cdee56044bfc1f69e_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom

File Explorer

2026-08-01_80de1a23a80d5c1cdee56044bfc1f69e_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom

.exe 17.8MB

2026-08-01_80de1a23a80d5c1cdee56044bfc1f69e_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom

IMPHASH 9fa822c2c01af2b04eebcc0685b7ccb0
SHA256 856629c618818d6453d8d5a1e6fb948adea0360cdff027e035b3524dca6bae39
MD5 80de1a23a80d5c1cdee56044bfc1f69e
SHA1 f10af3a21800cbbf72d23b16d02cc7935223e859
SHA512 7f144310848ee2a62c0708f15098b5e818caa0a7a122eb48d8e6468217c1782baa0440033384bf0819f7f02fd7d6e6bc9a67088e44b74052ff5eecb8e2cfdf1c
SSDEEP 98304:MsxRC7HIDnGXt34Xoh2DBk+JWdpFjxPHFXjrrJ4rL6Rf/CGEfO7hxk5vGb1mxbah:M2RC7oGXt3rcGHDlLuQ7ho0
TLSH
T1F0171A157A5A69EDC55AC474834B8A731A3034CF0B35BAFF44C486793FAAAF41F38618
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12191200

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

cua_driver_uia.pdb

advapi32

GetTokenInformation ConvertSidToStringSidW ConvertStringSecurityDescriptorToSecurityDescriptorW OpenProcessToken SystemFunction036 GetSidSubAuthority GetSidSubAuthorityCount

kernel32

GetCurrentProcess CloseHandle LocalFree GetNamedPipeClientProcessId OpenProcess CreateNamedPipeW WaitForSingleObject HeapSize GetStringTypeW SetStdHandle GetCPInfo GetOEMCP GetACP IsValidCodePage LCMapStringW CompareStringW LoadLibraryExW VirtualProtect UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA GetModuleHandleExW DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc RaiseException RtlPcToFileHeader RtlUnwindEx GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime PostQueuedCompletionStatus CreateProcessW WriteFile UnregisterWaitEx HeapAlloc GetProcAddress Sleep GetModuleHandleA GetOverlappedResult GetProcessId HeapFree ConnectNamedPipe DisconnectNamedPipe GetCurrentProcessId DuplicateHandle GetCurrentThreadId ReadFile GetQueuedCompletionStatusEx SetFileCompletionNotificationModes QueryFullProcessImageNameW FindNextFileW GetSystemDirectoryW GetConsoleMode GetTempPathW WaitForMultipleObjects CreateFileW GetLastError GetFileType GetFileAttributesW SetWaitableTimer GetProcessTimes GetConsoleOutputCP WriteConsoleW MultiByteToWideChar GetProcessHeap LoadLibraryExA WriteFileEx ProcessIdToSessionId SleepEx GetModuleFileNameW FormatMessageW CreateIoCompletionPort FreeEnvironmentStringsW CompareStringOrdinal TerminateProcess SetEnvironmentVariableW DeleteFileW SetLastError SetHandleInformation GetFinalPathNameByHandleW ReleaseMutex CreateMutexA LoadLibraryA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess FindClose GetTimeZoneInformationForYear GetFullPathNameW FindFirstFileExW RemoveDirectoryW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread CreateToolhelp32Snapshot Process32FirstW Process32NextW SetThreadStackGuarantee CancelIoEx AddVectoredExceptionHandler GetModuleHandleW SetFilePointerEx CreateDirectoryW GetStdHandle CreateEventW GetEnvironmentStringsW GetExitCodeProcess GetWindowsDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle CreateWaitableTimerExW CancelIo FreeLibrary MoveFileExW SetFileInformationByHandle GetSystemTimePreciseAsFileTime RtlVirtualUnwind SetFileTime RtlLookupFunctionEntry RtlCaptureContext FlushFileBuffers ReadFileEx CreateThread QueryPerformanceCounter QueryPerformanceFrequency HeapReAlloc RegisterWaitForSingleObject

bcryptprimitives

ProcessPrng

ws2_32

connect ioctlsocket WSACleanup WSAStartup getaddrinfo getsockopt freeaddrinfo send WSAGetLastError socket WSAIoctl setsockopt bind closesocket WSASocketW recv

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

user32

SetTimer EnumWindows GetWindowTextLengthW GetWindow EnableWindow MapVirtualKeyW GetDpiForSystem GetParent VkKeyScanW SendMessageTimeoutW SendInput SetWindowPos PostMessageW GetClassLongPtrW ScreenToClient IsChild ChildWindowFromPointEx PrintWindow GetWindowDC ReleaseDC GetDC GetSystemMetrics GetWindowTextW EnumChildWindows GetClassNameW keybd_event IsWindowVisible DestroySyntheticPointerDevice SetCursorPos InjectSyntheticPointerInput GetCursorPos CreateSyntheticPointerDevice WindowFromPoint GetAncestor LockSetForegroundWindow GetDpiForWindow GetWindowRect SetWindowLongPtrW ShowWindowAsync GetWindowLongPtrW ShowWindow IsIconic SetForegroundWindow IsWindow GetWindowThreadProcessId GetForegroundWindow WaitForInputIdle AttachThreadInput GetGUIThreadInfo

oleaut32

SysFreeString SysAllocStringLen VariantClear SysStringLen GetErrorInfo

ntdll

NtWriteFile RtlNtStatusToDosError NtCancelIoFileEx NtOpenFile NtCreateFile NtCreateNamedPipeFile NtReadFile NtDeviceIoControlFile

d3d11

CreateDirect3D11DeviceFromDXGIDevice D3D11CreateDevice

gdi32

SelectObject CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject BitBlt GetDIBits

ole32

CoUninitialize CoTaskMemFree CoIncrementMTAUsage CoCreateInstance CoInitializeEx

shell32

SHCreateItemFromParsingName ShellExecuteExW

dwmapi

DwmFlush DwmGetWindowAttribute

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

oleacc

AccessibleObjectFromWindow

winmm

timeBeginPeriod timeEndPeriod

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

bcrypt

BCryptGenRandom

Name

.text

Size

11.9MB

Virtual Size

11.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.1MB

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

579KB

Virtual Size

579KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

114KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_80de1a23a80d5c1cdee56044bfc1f69e_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom

advapi32

kernel32

bcryptprimitives

ws2_32

api-ms-win-core-synch-l1-2-0

user32

oleaut32

ntdll

d3d11

gdi32

ole32

shell32

dwmapi

api-ms-win-core-winrt-l1-1-0

oleacc

winmm

api-ms-win-core-winrt-error-l1-1-0

bcrypt

generic