General
- Target 2026-08-02_5ccdd07f86a98583473ccd2d37895a21_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 3.8MB
- Sample260802-dmq1cacl4y
- SHA256 e825fc7582a379aa686aaf3731a5f5df2446e2a6194c1361ccf60f30a0937e5f
- MD5 5ccdd07f86a98583473ccd2d37895a21
- SHA1 c43c5e54296d9dde1ead732774b1a06c71ab8df0
- SHA512 108e89f438a57f20865564822edd16546b8e93f7d684f361b4428d3e11102580d9e6714fa1e9bca9fe34d2d27747ab502a336ea08e3caba75209c5bcc0823e14
- SSDEEP 49152:QYRuhYqnP1hiFWm+RSDrBKSoZj0MHGqbhFD4X54XxauIwB+8uxfeHvCHFoqLYsKR:Q5arQ5XmEaX5Mx4RY31k
- TLSH T103068D03FE9592E8D09EC179C7179223EBB2B8891620B29F67D44B123F67B605F5D348
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_5ccdd07f86a98583473ccd2d37895a21_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_5ccdd07f86a98583473ccd2d37895a21_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_5ccdd07f86a98583473ccd2d37895a21_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 3.8MB
- SHA256 e825fc7582a379aa686aaf3731a5f5df2446e2a6194c1361ccf60f30a0937e5f
- MD5 5ccdd07f86a98583473ccd2d37895a21
- SHA1 c43c5e54296d9dde1ead732774b1a06c71ab8df0
- SHA512 108e89f438a57f20865564822edd16546b8e93f7d684f361b4428d3e11102580d9e6714fa1e9bca9fe34d2d27747ab502a336ea08e3caba75209c5bcc0823e14
- SSDEEP 49152:QYRuhYqnP1hiFWm+RSDrBKSoZj0MHGqbhFD4X54XxauIwB+8uxfeHvCHFoqLYsKR:Q5arQ5XmEaX5Mx4RY31k
- TLSH T103068D03FE9592E8D09EC179C7179223EBB2B8891620B29F67D44B123F67B605F5D348
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting