dccf950299db03495af5ac2787d5fc3f62b1ea7291b96b2abf34e70e67a25442

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 08:52

Target
2026-08-02_3a8bcb782fecf4bb96ddf0d2bae53f9a_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
Size 12.1MB
Sample260802-ks7cvayhrb
SHA256 dccf950299db03495af5ac2787d5fc3f62b1ea7291b96b2abf34e70e67a25442
MD5 3a8bcb782fecf4bb96ddf0d2bae53f9a
SHA1 5ceb72495b8242fae9ed0af2607569b68dea4107
SHA512 174d5aff6f2b21b73f9541a8f94482180248643c7dab69927792170ce99ebf9bbc2ad0c104203db6ac504789f29c71ad1740e818495c5278a184a7aba7eb7e98
SSDEEP 98304:iybW7ADppISl6XVTfuY4TIO9158hjx1kz4lcGqtVYieOSbUn+:Hj1Yu5PvHn7
TLSH
T138D65B4FF29582E9D05DC074935AA133E632BC890529B25FEBDC6E233F61F509B0935A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3988	2026-08-02_3a8bcb782fecf4bb96ddf0d2bae53f9a_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-02_3a8bcb782fecf4bb96ddf0d2bae53f9a_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-02_3a8bcb782fecf4bb96ddf0d2bae53f9a_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:3988