2026-08-03_790e9c50c49e7cc9baafd80284e2d094_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_790e9c50c49e7cc9baafd80284e2d094_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 3.5MB
Sample260804-c83qlabg83
SHA256 591bbe52354f18a81c1a9d68542340ef21b3663b86b825525fd8f276f0910c47
MD5 790e9c50c49e7cc9baafd80284e2d094
SHA1 a0d6f0a16b30f2d21dcf112501b42e9b72914ca8
SHA512 200daca37ee2434e79c4712b6e38db8029d4567beb0d7884df6c37cc64a410033f9d8c9c72678bddca98102cc3f75cf0adbacc62da36178a65cea68c6fcc9eb4
SSDEEP 49152:7VhHt0HwdEpuk3X7YNXX2y6JJGO9THSd7QI4/LfrORJcwUc4IU6i:7/t082ZwN81wH+
TLSH
T12F063A72A1E28FEBF065C07592C56572AB2DF88D0F2DFAE707D346243E21F9016E9605
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_790e9c50c49e7cc9baafd80284e2d094_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-08-03_790e9c50c49e7cc9baafd80284e2d094_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 3.5MB

2026-08-03_790e9c50c49e7cc9baafd80284e2d094_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH c5050420a835c2f4b00dd477a141bd15
SHA256 591bbe52354f18a81c1a9d68542340ef21b3663b86b825525fd8f276f0910c47
MD5 790e9c50c49e7cc9baafd80284e2d094
SHA1 a0d6f0a16b30f2d21dcf112501b42e9b72914ca8
SHA512 200daca37ee2434e79c4712b6e38db8029d4567beb0d7884df6c37cc64a410033f9d8c9c72678bddca98102cc3f75cf0adbacc62da36178a65cea68c6fcc9eb4
SSDEEP 49152:7VhHt0HwdEpuk3X7YNXX2y6JJGO9THSd7QI4/LfrORJcwUc4IU6i:7/t082ZwN81wH+
TLSH
T12F063A72A1E28FEBF065C07592C56572AB2DF88D0F2DFAE707D346243E21F9016E9605
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1675040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetExitCodeThread DeleteFileW CreateThread SetHandleInformation DuplicateHandle PostQueuedCompletionStatus CreateIoCompletionPort GetProcessHeap HeapFree AddVectoredExceptionHandler HeapReAlloc SwitchToThread FindNextFileW GetSystemTimePreciseAsFileTime GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry LoadLibraryA GetProcAddress lstrlenW RtlVirtualUnwind WideCharToMultiByte GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW QueryPerformanceFrequency GetModuleHandleW FormatMessageW QueryPerformanceCounter GetModuleHandleA CreateFileMappingW GetSystemInfo MapViewOfFile UnmapViewOfFile VirtualProtect SetFilePointerEx Sleep SetWaitableTimer CreateWaitableTimerExW GetTempPathW CreateDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle FindClose FindFirstFileExW SetFileInformationByHandle SetFileTime CreateFileW GetFullPathNameW WaitForSingleObject ReleaseMutex CreateMutexA GetCurrentProcessId GetCurrentProcess WaitForSingleObjectEx SetLastError GetCurrentThreadId CloseHandle GetLastError GetQueuedCompletionStatusEx GetSystemTimeAsFileTime InitializeSListHead GetCurrentThread SetThreadStackGuarantee SetUnhandledExceptionFilter

ntdll

RtlNtStatusToDosError NtCancelIoFileEx NtWriteFile NtReadFile NtDeviceIoControlFile

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

ws2_32

connect closesocket ioctlsocket setsockopt recv getaddrinfo getsockopt WSACleanup WSAStartup freeaddrinfo WSAGetLastError WSASend send select WSASocketW

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

vcruntime140

__current_exception __CxxFrameHandler3 memset memcpy memcmp memmove __C_specific_handler __current_exception_context

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-math-l1-1-0

sinf __setusermatherr sin pow cosf

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe __p___argv _initterm _initterm_e _configure_narrow_argv exit _exit _c_exit __p___argc _initialize_narrow_environment _get_initial_narrow_environment terminate _initialize_onexit_table _set_app_type _register_onexit_function _crt_atexit _cexit _register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_790e9c50c49e7cc9baafd80284e2d094_akira_cobalt-strike_glassworm_rusty-stealer_satacom

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

ws2_32

bcryptprimitives

bcrypt

advapi32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic