2026-08-02_b4847e66ad002565b773bd7729113460_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_b4847e66ad002565b773bd7729113460_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 1.1MB
Sample260802-c7k46aca99
SHA256 267ad77d549829c5ab11ea18062674e098b1b125e2eabb5e3bbaa7edd7e32092
MD5 b4847e66ad002565b773bd7729113460
SHA1 d75b8e306df258b7042cef4f76d9f0563cc46392
SHA512 150cddd738f22a24562b3707d125a3175aeb689405624d92f4d3de739db0ecf44dc80f3fc1fff5a196d5292c4a63d4fe8cde918392d710ce1ea8cec16c801ed7
SSDEEP 24576:eYUXFYT2l5m+f1vyEa68jZjpLdRblQCV:eYU2al5pfNXa68jZVLlZ
TLSH
T199457D56BA66C0FCC85EC0B5C75A2673BF61B48A0B357AEF02D056343E66AE01B3D705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_b4847e66ad002565b773bd7729113460_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-08-02_b4847e66ad002565b773bd7729113460_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 1.1MB

2026-08-02_b4847e66ad002565b773bd7729113460_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 3791962f7492f014d3ff166e0236f167
SHA256 267ad77d549829c5ab11ea18062674e098b1b125e2eabb5e3bbaa7edd7e32092
MD5 b4847e66ad002565b773bd7729113460
SHA1 d75b8e306df258b7042cef4f76d9f0563cc46392
SHA512 150cddd738f22a24562b3707d125a3175aeb689405624d92f4d3de739db0ecf44dc80f3fc1fff5a196d5292c4a63d4fe8cde918392d710ce1ea8cec16c801ed7
SSDEEP 24576:eYUXFYT2l5m+f1vyEa68jZjpLdRblQCV:eYU2al5pfNXa68jZVLlZ
TLSH
T199457D56BA66C0FCC85EC0B5C75A2673BF61B48A0B357AEF02D056343E66AE01B3D705
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

734304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SwitchToThread WaitForMultipleObjects GetExitCodeProcess CreateProcessW ReadFile GetOverlappedResult Sleep FindNextFileW CreateEventW GetExitCodeThread CreateIoCompletionPort PostQueuedCompletionStatus CreateDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle FindClose CancelIo SetFilePointerEx GetProcessHeap HeapFree AddVectoredExceptionHandler HeapReAlloc GetFileAttributesW FindFirstFileExW GetCurrentDirectoryW RtlCaptureContext DuplicateHandle LoadLibraryA GetProcAddress lstrlenW SetWaitableTimer WideCharToMultiByte GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW QueryPerformanceFrequency GetModuleHandleW FormatMessageW QueryPerformanceCounter GetModuleHandleA CompareStringOrdinal GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameW GetSystemDirectoryW GetWindowsDirectoryW CreateFileMappingW GetSystemInfo MapViewOfFile UnmapViewOfFile VirtualProtect GetSystemTimePreciseAsFileTime RtlLookupFunctionEntry SetFileInformationByHandle SetFileTime CreateFileW GetFullPathNameW CreateThread SetHandleInformation CreateWaitableTimerExW DeleteFileW WriteFileEx SleepEx ReadFileEx WaitForSingleObject RtlVirtualUnwind ReleaseMutex CreateMutexA GetCurrentProcessId GetCurrentProcess WaitForSingleObjectEx SetLastError GetCurrentThreadId CloseHandle GetLastError GetQueuedCompletionStatusEx GetSystemTimeAsFileTime InitializeSListHead GetCurrentThread GetTempPathW SetThreadStackGuarantee SetUnhandledExceptionFilter

ntdll

RtlNtStatusToDosError NtDeviceIoControlFile NtCancelIoFileEx NtWriteFile NtReadFile NtOpenFile NtCreateNamedPipeFile

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ws2_32

recv getaddrinfo connect send ioctlsocket closesocket WSAGetLastError WSASocketW WSACleanup WSAStartup select getsockopt setsockopt freeaddrinfo

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

vcruntime140

__current_exception_context __current_exception __CxxFrameHandler3 memcpy __C_specific_handler memset memcmp memmove

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-math-l1-1-0

pow cosf sinf __setusermatherr sin

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _configure_narrow_argv _initterm _initterm_e __p___argv exit _exit _cexit __p___argc _c_exit _set_app_type _register_thread_local_exe_atexit_callback _seh_filter_exe _get_initial_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit terminate

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_b4847e66ad002565b773bd7729113460_akira_cobalt-strike_glassworm_rusty-stealer_satacom

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

ws2_32

bcryptprimitives

bcrypt

advapi32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic