2026-08-04_0be016e8bee97a2cb77b38d28cdb5c13_akira_cobalt-strike_glassworm_megazord_rusty-stealer_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_0be016e8bee97a2cb77b38d28cdb5c13_akira_cobalt-strike_glassworm_megazord_rusty-stealer_satacom_vidar
Size 7.3MB
Sample260804-kclffaz1gt
SHA256 8e7b571c0b90a5c29e992ba14464e4083d437f7dddcb10b4cf1c97470585915f
MD5 0be016e8bee97a2cb77b38d28cdb5c13
SHA1 20316fee260e8a016371e81a1b67015db52ef609
SHA512 e106ea1ab5bcfd937916614f82a295866eddc379efbc071322d306dfbe4efea93cf782f7c93b11a4f08dfdea2367ff457b50875247c237d267e4bdb64ee175b7
SSDEEP 98304:qHaHiy8ZfAPgipPw44VICOUsXafJfWon+:qHaGAPGVICOvXaJP
TLSH
T128767D13F26580E8C46AC4B9939AA637F772BC89092072AB57E46F212F76F507F1D344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_0be016e8bee97a2cb77b38d28cdb5c13_akira_cobalt-strike_glassworm_megazord_rusty-stealer_satacom_vidar

File Explorer

2026-08-04_0be016e8bee97a2cb77b38d28cdb5c13_akira_cobalt-strike_glassworm_megazord_rusty-stealer_satacom_vidar

.exe 7.3MB

2026-08-04_0be016e8bee97a2cb77b38d28cdb5c13_akira_cobalt-strike_glassworm_megazord_rusty-stealer_satacom_vidar

IMPHASH 064f660e9d299ad7a63894b4fcd9b5a8
SHA256 8e7b571c0b90a5c29e992ba14464e4083d437f7dddcb10b4cf1c97470585915f
MD5 0be016e8bee97a2cb77b38d28cdb5c13
SHA1 20316fee260e8a016371e81a1b67015db52ef609
SHA512 e106ea1ab5bcfd937916614f82a295866eddc379efbc071322d306dfbe4efea93cf782f7c93b11a4f08dfdea2367ff457b50875247c237d267e4bdb64ee175b7
SSDEEP 98304:qHaHiy8ZfAPgipPw44VICOUsXafJfWon+:qHaGAPGVICOvXaJP
TLSH
T128767D13F26580E8C46AC4B9939AA637F772BC89092072AB57E46F212F76F507F1D344
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5220072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

chain.pdb

bcryptprimitives

ProcessPrng

ntdll

NtOpenFile RtlNtStatusToDosError NtCreateNamedPipeFile NtReadFile RtlGetVersion NtCreateFile NtDeviceIoControlFile NtCancelIoFileEx NtWriteFile

kernel32

FormatMessageW SetHandleInformation ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW GetModuleFileNameW DuplicateHandle SetWaitableTimer GetModuleHandleA SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc SwitchToThread RtlPcToFileHeader GetModuleHandleW GetUserDefaultUILanguage LCIDToLocaleName EncodePointer Sleep HeapAlloc GetCurrentThreadId TlsAlloc TlsGetValue ReleaseMutex GetTickCount OpenProcess QueryFullProcessImageNameW GetCurrentProcessId lstrlenW SetLastError MultiByteToWideChar WaitForSingleObject WideCharToMultiByte AreFileApisANSI GetDiskFreeSpaceW GetCurrentProcess LockFile SetFilePointer GetFullPathNameA SetEndOfFile TlsSetValue GetTempPathA WaitForSingleObjectEx GetDiskFreeSpaceA RtlLookupFunctionEntry GetFileAttributesExW CreateFileA DeleteFileA UnlockFile LockFileEx GetFileSize FlushFileBuffers DeviceIoControl FindNextFileW CreateWaitableTimerExW CreateSymbolicLinkW GetSystemInfo DeleteFileW GetTempPathW GetFileAttributesW TerminateProcess CreateProcessW GetSystemTimePreciseAsFileTime IsProcessorFeaturePresent CreateDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle FindClose LoadLibraryExA FreeLibrary FindFirstFileExW SetFileInformationByHandle SetFileTime GetFullPathNameW SetEvent CreateThread WriteFileEx ReadFileEx MapViewOfFile WriteConsoleW GetSystemTime GetSystemTimeAsFileTime LocalFree HeapDestroy HeapCompact FlushViewOfFile OutputDebugStringW HeapSize HeapValidate UnmapViewOfFile OutputDebugStringA HeapCreate RaiseException LoadLibraryExW GetConsoleOutputCP GetConsoleMode GetStdHandle TlsFree CreateMutexA ResetEvent LoadLibraryA IsDebuggerPresent CreateEventW SleepEx LoadLibraryW CreateMutexW GetFinalPathNameByHandleW GetProcAddress GetFileAttributesA CloseHandle GetLastError GetOverlappedResult WriteFile PostQueuedCompletionStatus ReadFile UnlockFileEx GetQueuedCompletionStatusEx SetNamedPipeHandleState CreateFileW CreateIoCompletionPort SetFileCompletionNotificationModes CancelIoEx FormatMessageA EnterCriticalSection InitializeCriticalSection SystemTimeToFileTime TryEnterCriticalSection DeleteCriticalSection CreateFileMappingW GetCommandLineW FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount InitializeSListHead RtlUnwindEx LeaveCriticalSection AddVectoredExceptionHandler SetEnvironmentVariableW RtlCaptureContext RtlVirtualUnwind GetCurrentDirectoryW GetEnvironmentVariableW QueryPerformanceFrequency QueryPerformanceCounter

advapi32

RegQueryValueExW RegOpenKeyExW RegSetValueExW RegCloseKey RegGetValueW RegDeleteValueW EventWriteTransfer EventUnregister EventSetInformation EventRegister CredWriteW CredDeleteW CredFree CredReadW SystemFunction036

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

user32

KillTimer SetWindowRgn GetParent GetWindow SetTimer FindWindowExW AppendMenuW TrackMouseEvent CloseTouchInputHandle DrawIconEx EnableMenuItem GetTouchInputInfo SetCapture GetCursorPos ClientToScreen TrackPopupMenu ScreenToClient GetKeyState UpdateWindow InvalidateRect SetCursorPos SetCursor LoadCursorW FlashWindowEx MonitorFromWindow VkKeyScanW IsWindow IsWindowEnabled IsIconic EnableWindow SetPropW GetKeyboardState SetWindowTextW MapWindowPoints IsProcessDPIAware SetWindowDisplayAffinity GetClientRect GetMenuBarInfo PostQuitMessage SystemParametersInfoA GetActiveWindow SetMenu RemoveMenu CreateIcon SetMenuItemInfoW DrawMenuBar CreatePopupMenu CreateMenu CreateAcceleratorTableW DestroyAcceleratorTable DestroyMenu MonitorFromRect InsertMenuW RegisterTouchWindow RegisterHotKey GetAsyncKeyState MapVirtualKeyExW GetKeyboardLayout OffsetRect SetFocus TranslateAcceleratorW IsWindowVisible ClipCursor SetForegroundWindow BringWindowToTop GetWindowRect ShowWindow EnumWindows GetMenuItemInfoW SetParent ReleaseDC GetClassNameW GetSystemMetrics GetClipCursor GetWindowThreadProcessId GetWindowTextW GetWindowTextLengthW SendInput FillRect ShowCursor GetLastInputInfo GetForegroundWindow SendMessageW FindWindowW SystemParametersInfoW DefWindowProcW RegisterClassW UnregisterHotKey MsgWaitForMultipleObjectsEx DispatchMessageW GetWindowDC MapVirtualKeyW GetUpdateRect PeekMessageW PostThreadMessageW ValidateRect SetWindowLongW GetRawInputData GetMessageW SetWindowLongPtrW GetSystemMenu GetMonitorInfoW DestroyIcon DestroyWindow GetDC CheckMenuItem DrawTextW GetWindowPlacement EnumChildWindows SetWindowPlacement ChangeDisplaySettingsExW DispatchMessageA TranslateMessage GetMessageA SetWindowPos CreateWindowExW RegisterClassExW RegisterRawInputDevices RegisterWindowMessageA GetWindowLongPtrW ToUnicodeEx AdjustWindowRectEx PostMessageW RedrawWindow AdjustWindowRect EnumDisplayMonitors MonitorFromPoint GetMenu GetWindowLongW InvalidateRgn ReleaseCapture ChangeWindowMessageFilterEx

comctl32

TaskDialogIndirect RemoveWindowSubclass DefSubclassProc SetWindowSubclass

oleaut32

SysStringLen SysFreeString GetErrorInfo SetErrorInfo

ole32

CoUninitialize CoTaskMemFree CoCreateInstance OleInitialize CoIncrementMTAUsage RegisterDragDrop CoInitializeEx CoTaskMemAlloc CoCreateFreeThreadedMarshaler RevokeDragDrop

shlwapi

SHCreateMemStream

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow DwmGetWindowAttribute

wtsapi32

WTSQuerySessionInformationW WTSFreeMemory

shell32

DragQueryFileW ShellExecuteW Shell_NotifyIconW SHCreateItemFromParsingName SHAppBarMessage SHGetKnownFolderPath DragFinish Shell_NotifyIconGetRect

gdi32

SetBkMode DeleteDC BitBlt SelectObject CreateCompatibleDC CreateRectRgn SetTextColor CreateDIBSection CreateSolidBrush DeleteObject CombineRgn GetDeviceCaps

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

bcrypt

BCryptGenRandom

ws2_32

getsockopt getsockname WSAGetLastError getpeername connect WSAStartup ioctlsocket WSASocketW closesocket recv WSACleanup WSASend shutdown send freeaddrinfo getaddrinfo bind setsockopt WSAIoctl

crypt32

CertFreeCertificateChain CertFreeCertificateChainEngine CertOpenStore CertGetCertificateChain CertSetCertificateContextProperty CertFreeCertificateContext CertCloseStore CertCreateCertificateChainEngine CertVerifyCertificateChainPolicy CertAddEncodedCertificateToStore

api-ms-win-crt-string-l1-1-0

wcscmp strcspn wcsncmp strcmp strcpy_s strncmp strlen _wcsicmp strspn wcslen

api-ms-win-crt-math-l1-1-0

_dclass fabs fmod round log floor roundf trunc pow __setusermatherr

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc calloc _set_new_mode _msize realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

abort _endthreadex _configure_narrow_argv _get_initial_narrow_environment _seh_filter_exe _set_app_type terminate _initterm_e exit _exit _initialize_narrow_environment __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _beginthreadex _initterm _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Name

.text

Size

5.1MB

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

25KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

120KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

365KB

Virtual Size

365KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_0be016e8bee97a2cb77b38d28cdb5c13_akira_cobalt-strike_glassworm_megazord_rusty-stealer_satacom_vidar

bcryptprimitives

ntdll

kernel32

advapi32

api-ms-win-core-synch-l1-2-0

user32

comctl32

oleaut32

ole32

shlwapi

dwmapi

wtsapi32

shell32

gdi32

api-ms-win-core-winrt-l1-1-0

bcrypt

ws2_32

crypt32

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic