General

  • Target
    2026-08-05_d4563255db289b540854ba504104f519_akira_cobalt-strike_rusty-stealer_satacom
  • Size 25.0MB
  • Sample260805-spd6wsbj2s
  • SHA256 72bf2497ba14e310d2377f1fc72d148a22b80652156b0b4c335d7f6e0ddddcc8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-05_d4563255db289b540854ba504104f519_akira_cobalt-strike_rusty-stealer_satacom
    • Size 25.0MB
    • SHA256 72bf2497ba14e310d2377f1fc72d148a22b80652156b0b4c335d7f6e0ddddcc8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Looks for VirtualBox drivers on disk

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Looks for VMWare drivers on disk

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks