06c5be33a368df98150a68ca2170991977a6a2f438779cd0ec6d011c30f93228

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 00:35

Target
2026-08-06_88ad80f6ae53fef0904d6cd6b9364373_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 45.8MB
Sample260807-axl8csvaje
SHA256 06c5be33a368df98150a68ca2170991977a6a2f438779cd0ec6d011c30f93228
MD5 88ad80f6ae53fef0904d6cd6b9364373
SHA1 f73bb51daab65883041c76c23b85f16eca3150cd
SHA512 877039eefe0c5b37afca4a9dbdc726425e939d51eae0e6af8952f93518bef51785efe9fd6f3018265199990a326269af05eb94f3cde5ff88655dab898cd966c7
SSDEEP 393216:PhH6OCF9/ztZTT3js0ht0N/O+Apg8JUwemIAe+wkpHiXUxY/iJ53IWhlVjEeIZmR:Phd+tvDj3cApgJcUub1hp
TLSH
T1D6B77C03F2A794E9D0BBC57482DAA233EA717C490B3465EB07D04F322E76BD06639B55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3308	2026-08-06_88ad80f6ae53fef0904d6cd6b9364373_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-06_88ad80f6ae53fef0904d6cd6b9364373_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-06_88ad80f6ae53fef0904d6cd6b9364373_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:3308