General
- Target 2026-08-06_d56f196053ff7941947c14d257429d40_akira_cobalt-strike_rusty-stealer_satacom
- Size 1.2MB
- Sample260807-ahbs3sw1ew
- SHA256 c7982fe2211468f5e90190ac53e0c5b5b2422b86af6077b8136a9f799eaa5719
- MD5 d56f196053ff7941947c14d257429d40
- SHA1 770350c2b22fad3858a33a95ec7f28e786cfee26
- SHA512 21052b5ae55968b6c453a90e147449cd927bb024065f70d959ab32bf83dd0c33d0d6bf2c1057f9f1660d357da5cce00d70060f859bb72840bb425c0fcd1cae84
- SSDEEP 24576:g+r+7WQ2tENAQ3Cnar1Cv/lgZ8T97h4s6R2XV4C:g+rh7W1m/6Oxrc2XP
- TLSH T1A755BF43F766D0F8DA5AC038D7665533BB23B89D47206AEB22945A393E13FC16B2D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_d56f196053ff7941947c14d257429d40_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_d56f196053ff7941947c14d257429d40_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_d56f196053ff7941947c14d257429d40_akira_cobalt-strike_rusty-stealer_satacom
- Size 1.2MB
- SHA256 c7982fe2211468f5e90190ac53e0c5b5b2422b86af6077b8136a9f799eaa5719
- MD5 d56f196053ff7941947c14d257429d40
- SHA1 770350c2b22fad3858a33a95ec7f28e786cfee26
- SHA512 21052b5ae55968b6c453a90e147449cd927bb024065f70d959ab32bf83dd0c33d0d6bf2c1057f9f1660d357da5cce00d70060f859bb72840bb425c0fcd1cae84
- SSDEEP 24576:g+r+7WQ2tENAQ3Cnar1Cv/lgZ8T97h4s6R2XV4C:g+rh7W1m/6Oxrc2XP
- TLSH T1A755BF43F766D0F8DA5AC038D7665533BB23B89D47206AEB22945A393E13FC16B2D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtCreateThreadExHideFromDebugger