8e7b571c0b90a5c29e992ba14464e4083d437f7dddcb10b4cf1c97470585915f | Triage™

Login
Reports

Overview

overview

6

Static

static

3

2026-08-04...ar.exe

windows10-2004-x64

6

2026-08-04...ar.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_0be016e8bee97a2cb77b38d28cdb5c13_akira_cobalt-strike_glassworm_megazord_rusty-stealer_satacom_vidar
Size 7.3MB
Sample260804-kclffaz1gt
SHA256 8e7b571c0b90a5c29e992ba14464e4083d437f7dddcb10b4cf1c97470585915f
MD5 0be016e8bee97a2cb77b38d28cdb5c13
SHA1 20316fee260e8a016371e81a1b67015db52ef609
SHA512 e106ea1ab5bcfd937916614f82a295866eddc379efbc071322d306dfbe4efea93cf782f7c93b11a4f08dfdea2367ff457b50875247c237d267e4bdb64ee175b7
SSDEEP 98304:qHaHiy8ZfAPgipPw44VICOUsXafJfWon+:qHaGAPGVICOvXaJP
TLSH
T128767D13F26580E8C46AC4B9939AA637F772BC89092072AB57E46F212F76F507F1D344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-04_0be016e8bee97a2cb77b38d28cdb5c13_akira_cobalt-strike_glassworm_megazord_rusty-stealer_satacom_vidar.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery persistence trojan

Behavioral task

behavioral2

Sample

2026-08-04_0be016e8bee97a2cb77b38d28cdb5c13_akira_cobalt-strike_glassworm_megazord_rusty-stealer_satacom_vidar.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery persistence spyware trojan

Malware Config

Targets

- Target
  2026-08-04_0be016e8bee97a2cb77b38d28cdb5c13_akira_cobalt-strike_glassworm_megazord_rusty-stealer_satacom_vidar
- Size 7.3MB
- SHA256 8e7b571c0b90a5c29e992ba14464e4083d437f7dddcb10b4cf1c97470585915f
- MD5 0be016e8bee97a2cb77b38d28cdb5c13
- SHA1 20316fee260e8a016371e81a1b67015db52ef609
- SHA512 e106ea1ab5bcfd937916614f82a295866eddc379efbc071322d306dfbe4efea93cf782f7c93b11a4f08dfdea2367ff457b50875247c237d267e4bdb64ee175b7
- SSDEEP 98304:qHaHiy8ZfAPgipPw44VICOUsXafJfWon+:qHaGAPGVICOvXaJP
- TLSH
  T128767D13F26580E8C46AC4B9939AA637F772BC89092072AB57E46F212F76F507F1D344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence trojan spyware
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistencetrojan

behavioral2

defense_evasiondiscoverypersistencespywaretrojan

© 2018-2026

Terms | Privacy