General
- Target 2026-08-06_4e1bb82ef5b9301fb954a01c061cd27f_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 21.2MB
- Sample260807-a5w3javbmf
- SHA256 5a83e7d0b5c070c2ed682b1584d2eb2f364ff5a0e995e987a76f2d1c6a27f5f0
- MD5 4e1bb82ef5b9301fb954a01c061cd27f
- SHA1 b4c0c5c3ccaafe193d5aaee29fd6cb2a89097864
- SHA512 11a99c6d392870abeaca368cbb6c1c7ac9690a1d796a06d3255a921d4059a49b1460b5423bfd443e5646183737efd68d04a31f657d3554bf053aa4c966d471bb
- SSDEEP 393216:HacKLdx/gQu6oY4neX8Ll1zwGsFScmIeyAamWu:6cKLdx/gQu6oY4neX8R1dRDyb
- TLSH T104272925BB5A996CD09BC47483478A624A7130DB1B35B9FF44C496382F7EBF46F38218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-06_4e1bb82ef5b9301fb954a01c061cd27f_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_4e1bb82ef5b9301fb954a01c061cd27f_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_4e1bb82ef5b9301fb954a01c061cd27f_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 21.2MB
- SHA256 5a83e7d0b5c070c2ed682b1584d2eb2f364ff5a0e995e987a76f2d1c6a27f5f0
- MD5 4e1bb82ef5b9301fb954a01c061cd27f
- SHA1 b4c0c5c3ccaafe193d5aaee29fd6cb2a89097864
- SHA512 11a99c6d392870abeaca368cbb6c1c7ac9690a1d796a06d3255a921d4059a49b1460b5423bfd443e5646183737efd68d04a31f657d3554bf053aa4c966d471bb
- SSDEEP 393216:HacKLdx/gQu6oY4neX8Ll1zwGsFScmIeyAamWu:6cKLdx/gQu6oY4neX8R1dRDyb
- TLSH T104272925BB5A996CD09BC47483478A624A7130DB1B35B9FF44C496382F7EBF46F38218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.