General
- Target 2026-08-02_a3916ae7a227f64cf2f9012b04843555_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 9.3MB
- Sample260802-dabpwssfrb
- SHA256 e7f5d0f9bd18b268c8832b5222fa05cb3650e6deeeaf7d3a92a3a619a8c11d8a
- MD5 a3916ae7a227f64cf2f9012b04843555
- SHA1 4b19407d8717b1e6a61788be50384591a531fc9c
- SHA512 6a02261b45a6510d96dde2e7b8ea0688f3abc491318110e1ecdabe567c21e5f68cd7629447a1c638708233a033e81e7160b0da2011bebb765241521e261a5667
- SSDEEP 98304:EWF0n7x09cmPV6N98SgS9l/jvlQP9aX/wqxMxzJQK2PwDOcksTZhWCbMzXmnbm4:6n7xK6N979vyaXdy5ksTMzXmD
- TLSH T17EA66E03F66250F8C06AC174831AE633F736B88D592476BF2BA45B312E6AF506F1D758
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-02_a3916ae7a227f64cf2f9012b04843555_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-08-02_a3916ae7a227f64cf2f9012b04843555_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=EventBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=NewsBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=AdminCheckBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=ForceGetBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=BanCheckBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=RegisterBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=BroadcastGetBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=TrialBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=AdminCheckBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=BanCheckBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=RegisterBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=TrialBooster
Extracted
-
ps1
-
exe.dropper
https://privateredeyeapi.com/?action=BroadcastGetBooster
Targets
-
- Target 2026-08-02_a3916ae7a227f64cf2f9012b04843555_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 9.3MB
- SHA256 e7f5d0f9bd18b268c8832b5222fa05cb3650e6deeeaf7d3a92a3a619a8c11d8a
- MD5 a3916ae7a227f64cf2f9012b04843555
- SHA1 4b19407d8717b1e6a61788be50384591a531fc9c
- SHA512 6a02261b45a6510d96dde2e7b8ea0688f3abc491318110e1ecdabe567c21e5f68cd7629447a1c638708233a033e81e7160b0da2011bebb765241521e261a5667
- SSDEEP 98304:EWF0n7x09cmPV6N98SgS9l/jvlQP9aX/wqxMxzJQK2PwDOcksTZhWCbMzXmnbm4:6n7xK6N979vyaXdy5ksTMzXmD
- TLSH T17EA66E03F66250F8C06AC174831AE633F736B88D592476BF2BA45B312E6AF506F1D758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.