Analysis
- max time kernel
150s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 10:44
Behavioral task
behavioral1
Sample
2026-08-03_9671043a6326d9e9b06f55d4085cf472_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_9671043a6326d9e9b06f55d4085cf472_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-03_9671043a6326d9e9b06f55d4085cf472_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe
- Size 71.9MB
- Sample260804-msvp6ayaka
- SHA256 1d9b75a7935182da01e185f149467c61d6460a4c1190cb3cd676cc1236cf2b4f
- MD5 9671043a6326d9e9b06f55d4085cf472
- SHA1 64f5c5f49e2f828e1d2b8cd1147c5ea530a37e50
- SHA512 ead9ebc5376a5142561299fbc6b589d8045f4eb06e5d88dfbed42d7fc8f4c06061368c3119218bb1e5966f5947ddeb7ab1f09a2f59afe308c408721610d631a3
- SSDEEP 786432:psO6JBXBlThgHzFkpqMaH+8cBVdV2mRgJT:aIFkqMk+8cBVdV2eg
- TLSH T147F7D611BB5FA85CE197C874834A8B734B7030DB1A36B9BF44C492353FAE6A45B2D319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables containing URLs to raw contents of a Github gist 1 IoCs
resource yara_rule behavioral2/memory/5672-0-0x00007FF753EC0000-0x00007FF7586B5000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL - UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule behavioral2/memory/5672-0-0x00007FF753EC0000-0x00007FF7586B5000-memory.dmp UPX -
resource yara_rule behavioral2/memory/5672-0-0x00007FF753EC0000-0x00007FF7586B5000-memory.dmp upx
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_9671043a6326d9e9b06f55d4085cf472_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_9671043a6326d9e9b06f55d4085cf472_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe"1⤵PID:5672