General
- Target 2026-08-04_6ddfcf00b00f31863f06d7796673e59c_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 9.3MB
- Sample260804-yjkdlsdj7v
- SHA256 00beeceabd03ce130e6cfeff4a114b3eb8408dfd5e6e97c7dba7cff9c5fff858
- MD5 6ddfcf00b00f31863f06d7796673e59c
- SHA1 9ca45e74c628d25ff87a79f7a309472ca8fb71bf
- SHA512 06a38e50de592d5ca7d9045e052877729611caa1cb320e0c24f779cbeda26632b0146f0a2a26b9f7e403f975163360f386f3e9d11c6375551823f35df473e697
- SSDEEP 12288:zJPvX5Q+otuOSPZAmKLUxauIb1l4r8ZUHl7PEDxAMFO:zZRQgO4Rl7PER4
- TLSH T1F8A66C13F66555FDE46FC039832696A3EBB7789E4721B5EF01A052203F5AAA80F3D740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_6ddfcf00b00f31863f06d7796673e59c_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_6ddfcf00b00f31863f06d7796673e59c_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_6ddfcf00b00f31863f06d7796673e59c_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 9.3MB
- SHA256 00beeceabd03ce130e6cfeff4a114b3eb8408dfd5e6e97c7dba7cff9c5fff858
- MD5 6ddfcf00b00f31863f06d7796673e59c
- SHA1 9ca45e74c628d25ff87a79f7a309472ca8fb71bf
- SHA512 06a38e50de592d5ca7d9045e052877729611caa1cb320e0c24f779cbeda26632b0146f0a2a26b9f7e403f975163360f386f3e9d11c6375551823f35df473e697
- SSDEEP 12288:zJPvX5Q+otuOSPZAmKLUxauIb1l4r8ZUHl7PEDxAMFO:zZRQgO4Rl7PER4
- TLSH T1F8A66C13F66555FDE46FC039832696A3EBB7789E4721B5EF01A052203F5AAA80F3D740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Modifies RDP port number used by Windows
-
Checks whether UAC is enabled