General
- Target 2026-08-06_2f3c229408b91b97318eb11df120cf9f_akira_cobalt-strike_coinminer_glassworm_rusty-stealer_satacom
- Size 20.8MB
- Sample260807-basx3adp4z
- SHA256 f2ece5b8c05c50366158268bca870e051fff71f55a1de24eb710c4a578402185
- MD5 2f3c229408b91b97318eb11df120cf9f
- SHA1 921598044565ebf1267d61e228585e8cf88b91a2
- SHA512 e266416915e2113a8cf5cca479593c4b49c917bb42fe99fb1eae4abc96bfb71d08014ee50a8c5c08f394c41e2a7422502ef093bb9ef38decc01ce83b3c2ea893
- SSDEEP 98304:x+L2uk+ayxsiTsSFPDFakOZFKVXjexr0P6kEvSaxnO2hw+48+KBhnFDfqzy9328U:0TxJoGysVXCd0P6kEK0nO6wy59B99
- TLSH T166273901BEAE1998E09DCCB0C34A8B574E2130DB1A36B5EF45C552682F7E7F15F2931A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-06_2f3c229408b91b97318eb11df120cf9f_akira_cobalt-strike_coinminer_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_2f3c229408b91b97318eb11df120cf9f_akira_cobalt-strike_coinminer_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260710-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_2f3c229408b91b97318eb11df120cf9f_akira_cobalt-strike_coinminer_glassworm_rusty-stealer_satacom
- Size 20.8MB
- SHA256 f2ece5b8c05c50366158268bca870e051fff71f55a1de24eb710c4a578402185
- MD5 2f3c229408b91b97318eb11df120cf9f
- SHA1 921598044565ebf1267d61e228585e8cf88b91a2
- SHA512 e266416915e2113a8cf5cca479593c4b49c917bb42fe99fb1eae4abc96bfb71d08014ee50a8c5c08f394c41e2a7422502ef093bb9ef38decc01ce83b3c2ea893
- SSDEEP 98304:x+L2uk+ayxsiTsSFPDFakOZFKVXjexr0P6kEvSaxnO2hw+48+KBhnFDfqzy9328U:0TxJoGysVXCd0P6kEK0nO6wy59B99
- TLSH T166273901BEAE1998E09DCCB0C34A8B574E2130DB1A36B5EF45C552682F7E7F15F2931A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.