General
- Target 2026-08-04_8176c144003834eddd17c6ec0c489aef_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 756KB
- Sample260804-hcsteahm4t
- SHA256 5811027774a6290466aab1b646325ea8ef0d354953d15a27080140d9a7c9c9e3
- MD5 8176c144003834eddd17c6ec0c489aef
- SHA1 7f7d65dd4ee67477024f3e4bd9b160f35b13004e
- SHA512 542d3fea58d34bd488c5b51b0a0be54a4fee1ce595a449d0322dc1f00b32df7a81b8814e8768d632e0a2ba51619ff48695b3fa2081fbc714c2ac3fb1e5c08026
- SSDEEP 12288:Pq0vg1izIl8STJIWlL10b773Ch4/P2WX05bpEB3sm/8sYwcYEPS:PnoOIjZAzsm/k
- TLSH T1A4F45B17A9A491EDD06EC034836692E2EB7B785E0B2175FF11E463283F65AE41F3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_8176c144003834eddd17c6ec0c489aef_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_8176c144003834eddd17c6ec0c489aef_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_8176c144003834eddd17c6ec0c489aef_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 756KB
- SHA256 5811027774a6290466aab1b646325ea8ef0d354953d15a27080140d9a7c9c9e3
- MD5 8176c144003834eddd17c6ec0c489aef
- SHA1 7f7d65dd4ee67477024f3e4bd9b160f35b13004e
- SHA512 542d3fea58d34bd488c5b51b0a0be54a4fee1ce595a449d0322dc1f00b32df7a81b8814e8768d632e0a2ba51619ff48695b3fa2081fbc714c2ac3fb1e5c08026
- SSDEEP 12288:Pq0vg1izIl8STJIWlL10b773Ch4/P2WX05bpEB3sm/8sYwcYEPS:PnoOIjZAzsm/k
- TLSH T1A4F45B17A9A491EDD06EC034836692E2EB7B785E0B2175FF11E463283F65AE41F3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Modifies RDP port number used by Windows
-
Checks whether UAC is enabled