General
- Target 2026-08-05_d4563255db289b540854ba504104f519_akira_cobalt-strike_rusty-stealer_satacom
- Size 25.0MB
- Sample260805-spd6wsbj2s
- SHA256 72bf2497ba14e310d2377f1fc72d148a22b80652156b0b4c335d7f6e0ddddcc8
- MD5 d4563255db289b540854ba504104f519
- SHA1 c718fb7425489ed2954475d86abd3a7abf9e0858
- SHA512 4a29ba1dd729d56ea1a5549a1476c83018294a14f1af639c9fe07a51900a97f15eafd66b5e68d28b0a2e3688918908740cd739ea290f182a666287f2605c4552
- SSDEEP 786432:hGqlcB4NB3mrZoqYKUwpnaoF2+wpB0DgNff6zb:blcW3sjUwcV+wpBq
- TLSH T192471202F9C78CA8F08DC87483569A67DA2274DB1936A6EF17D855283F6FBB05F18305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-05_d4563255db289b540854ba504104f519_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_d4563255db289b540854ba504104f519_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_d4563255db289b540854ba504104f519_akira_cobalt-strike_rusty-stealer_satacom
- Size 25.0MB
- SHA256 72bf2497ba14e310d2377f1fc72d148a22b80652156b0b4c335d7f6e0ddddcc8
- MD5 d4563255db289b540854ba504104f519
- SHA1 c718fb7425489ed2954475d86abd3a7abf9e0858
- SHA512 4a29ba1dd729d56ea1a5549a1476c83018294a14f1af639c9fe07a51900a97f15eafd66b5e68d28b0a2e3688918908740cd739ea290f182a666287f2605c4552
- SSDEEP 786432:hGqlcB4NB3mrZoqYKUwpnaoF2+wpB0DgNff6zb:blcW3sjUwcV+wpBq
- TLSH T192471202F9C78CA8F08DC87483569A67DA2274DB1936A6EF17D855283F6FBB05F18305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox drivers on disk
-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE