General
- Target 2026-08-02_4d8bc40e1b7cedcf65f15071afa978d4_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 45.2MB
- Sample260802-rvh7csbd47
- SHA256 a0a063e64c94c191813d2d5772c7af778e6602098c6fb16caf487ade1697d95f
- MD5 4d8bc40e1b7cedcf65f15071afa978d4
- SHA1 525501aa3afdb86bdb7eaddfea4a87cbce9e4caa
- SHA512 9fa54c834db0d635752ac5e314a9bd41b3563027ae9161e7749bd0e6f7ca307f153d661dc439307b6f7134cd791341798f26c474765acb4e9c771a16d57c719b
- SSDEEP 393216:GRR+p8/ER6FYDZN8z6i3thSUZOOrx9F0ng53njpORSp3:GRR+p8/ER6azvidYUlDWS3n1r
- TLSH T15BA74A117A5B996DD58BC8B0C3878A774E2130DB0A36B9BF44C452393F7DBF46B29218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_4d8bc40e1b7cedcf65f15071afa978d4_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_4d8bc40e1b7cedcf65f15071afa978d4_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_4d8bc40e1b7cedcf65f15071afa978d4_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 45.2MB
- SHA256 a0a063e64c94c191813d2d5772c7af778e6602098c6fb16caf487ade1697d95f
- MD5 4d8bc40e1b7cedcf65f15071afa978d4
- SHA1 525501aa3afdb86bdb7eaddfea4a87cbce9e4caa
- SHA512 9fa54c834db0d635752ac5e314a9bd41b3563027ae9161e7749bd0e6f7ca307f153d661dc439307b6f7134cd791341798f26c474765acb4e9c771a16d57c719b
- SSDEEP 393216:GRR+p8/ER6FYDZN8z6i3thSUZOOrx9F0ng53njpORSp3:GRR+p8/ER6azvidYUlDWS3n1r
- TLSH T15BA74A117A5B996DD58BC8B0C3878A774E2130DB0A36B9BF44C452393F7DBF46B29218
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.