General
- Target 2026-08-03_fd75efa6d1a48ac3378a1b51a795782d_akira_cobalt-strike_rusty-stealer_satacom
- Size 3.3MB
- Sample260804-kpwrya1xdx
- SHA256 8beb0812022b54f907f6957c60ace9b6a373d59f56506c0005c50e61e147b2f8
- MD5 fd75efa6d1a48ac3378a1b51a795782d
- SHA1 93399205001ab47c4aa9f082374b2a7fdff1e999
- SHA512 06e9815f13bdd4f6d12c539cf75fc050e26c5e69aa0001da2c0ec76705028b55d908b1bcd4c6b02bfd440774437313367110d3f74a778162e34c4a38f636fe1d
- SSDEEP 49152:cbWbzYrtT63PS6w2n+Qo9oWP/zVQkqTQWTZCOodyF8FzT7fgcSQed+Y:cibzYJT2/n4W0BSQQ
- TLSH T17FF56D43F66281E8C16EC174835AA637FB72788A0A3476EF66E45B313F26F506B1D305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_fd75efa6d1a48ac3378a1b51a795782d_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_fd75efa6d1a48ac3378a1b51a795782d_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_fd75efa6d1a48ac3378a1b51a795782d_akira_cobalt-strike_rusty-stealer_satacom
- Size 3.3MB
- SHA256 8beb0812022b54f907f6957c60ace9b6a373d59f56506c0005c50e61e147b2f8
- MD5 fd75efa6d1a48ac3378a1b51a795782d
- SHA1 93399205001ab47c4aa9f082374b2a7fdff1e999
- SHA512 06e9815f13bdd4f6d12c539cf75fc050e26c5e69aa0001da2c0ec76705028b55d908b1bcd4c6b02bfd440774437313367110d3f74a778162e34c4a38f636fe1d
- SSDEEP 49152:cbWbzYrtT63PS6w2n+Qo9oWP/zVQkqTQWTZCOodyF8FzT7fgcSQed+Y:cibzYJT2/n4W0BSQQ
- TLSH T17FF56D43F66281E8C16EC174835AA637FB72788A0A3476EF66E45B313F26F506B1D305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled