General
- Target 2026-08-03_2021572a11def48d42750a8e1fa627e2_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom
- Size 19.3MB
- Sample260804-drt8kafl2s
- SHA256 5aaa58e217f617ecc37335fc548acb69c8223bb0ac00a3685d7d03c47ed11e79
- MD5 2021572a11def48d42750a8e1fa627e2
- SHA1 5bcd9a26efabbf4b5078c72feff60142ee2c600f
- SHA512 5fd9594e0e90fb9d1552cc351b13b406eaa63560d01db1d3037084b509d5b3f754a0bab6e25a99f41047dc0d1a55910876273adc7bc537a93ca4c2c119a39a7d
- SSDEEP 98304:yXng5gqtDqZEVig0WscsNuF0PIL7UqlGrU/qpDTabRmM03pqG9PqsBE5OWI6Yt+b:6ngWqtDqD7BsefpYOfvt+OV4Qt1K
- TLSH T12D170621BB5A99ACD05AC47483474A724A3570CB0B35B9FF45D496383FAABF42F38358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-03_2021572a11def48d42750a8e1fa627e2_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_2021572a11def48d42750a8e1fa627e2_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_2021572a11def48d42750a8e1fa627e2_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom
- Size 19.3MB
- SHA256 5aaa58e217f617ecc37335fc548acb69c8223bb0ac00a3685d7d03c47ed11e79
- MD5 2021572a11def48d42750a8e1fa627e2
- SHA1 5bcd9a26efabbf4b5078c72feff60142ee2c600f
- SHA512 5fd9594e0e90fb9d1552cc351b13b406eaa63560d01db1d3037084b509d5b3f754a0bab6e25a99f41047dc0d1a55910876273adc7bc537a93ca4c2c119a39a7d
- SSDEEP 98304:yXng5gqtDqZEVig0WscsNuF0PIL7UqlGrU/qpDTabRmM03pqG9PqsBE5OWI6Yt+b:6ngWqtDqD7BsefpYOfvt+OV4Qt1K
- TLSH T12D170621BB5A99ACD05AC47483474A724A3570CB0B35B9FF45D496383FAABF42F38358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.