e932805a5520ffaceea89b802205e5930101865ae18655aef007a0abadd701e1

Analysis

max time kernel
150s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 00:33

Target
2026-08-06_90e140a7d31b181e304c819d1e2b71f6_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
Size 31.7MB
Sample260807-av65radb76
SHA256 e932805a5520ffaceea89b802205e5930101865ae18655aef007a0abadd701e1
MD5 90e140a7d31b181e304c819d1e2b71f6
SHA1 4fbc3cc9796470db59749207330a16b673e1363c
SHA512 c0c6a0c8e8a00c57d03ea8a6dfcac6bec029833b00c5e19553972c8bf8285c4d148ce826e0a0824217a2efa94e4264072b7fcf2d0d7784eb3fcdc33e8a35a6bb
SSDEEP 393216:PEOvvldl04mH0WjMDgNHgHS71F1ZZzN2TMW16e0:smXmH0PU1gHWXZhAp110
TLSH
T1A3774B01B67BD8ACD06AC47083464B635B2174DE2F36B9FB15C491343F6ABA06F2DB25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5996	2026-08-06_90e140a7d31b181e304c819d1e2b71f6_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-06_90e140a7d31b181e304c819d1e2b71f6_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-06_90e140a7d31b181e304c819d1e2b71f6_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:5996