General
- Target 2026-08-08_e7e81b18e3c7e0568c95a2151e20d2e9_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 26.6MB
- Sample260808-pjbxssfj4t
- SHA256 564958ed748bc98dd7790fe7bee9e33495e6371c219bee379dca5d8d21692866
- MD5 e7e81b18e3c7e0568c95a2151e20d2e9
- SHA1 504c0be35e990af2edfab61e32b9a39c32aea4f8
- SHA512 4f698a553ae483fa4221d9d45564ecc32f181d493ba06acb1ba2769dd38d1fcdd509f90b95acd6097d25c13d8f30b5bf44f8b9609c88778bd29dad48ba0c043e
- SSDEEP 98304:17UW+kSU9KFKAcRHs/aYMkJwrNuq8j2tNGAIOlIdmLaNJDLJgVE6HtCez/AmdkxL:NAcRXUWG3RJyzuxLbkIeru
- TLSH T1D3570725BA5A996CD09AC474834B8A725A3130DB0B35B9FF44D492383F6DBF46F38319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_e7e81b18e3c7e0568c95a2151e20d2e9_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_e7e81b18e3c7e0568c95a2151e20d2e9_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e7e81b18e3c7e0568c95a2151e20d2e9_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 26.6MB
- SHA256 564958ed748bc98dd7790fe7bee9e33495e6371c219bee379dca5d8d21692866
- MD5 e7e81b18e3c7e0568c95a2151e20d2e9
- SHA1 504c0be35e990af2edfab61e32b9a39c32aea4f8
- SHA512 4f698a553ae483fa4221d9d45564ecc32f181d493ba06acb1ba2769dd38d1fcdd509f90b95acd6097d25c13d8f30b5bf44f8b9609c88778bd29dad48ba0c043e
- SSDEEP 98304:17UW+kSU9KFKAcRHs/aYMkJwrNuq8j2tNGAIOlIdmLaNJDLJgVE6HtCez/AmdkxL:NAcRXUWG3RJyzuxLbkIeru
- TLSH T1D3570725BA5A996CD09AC474834B8A725A3130DB0B35B9FF44D492383F6DBF46F38319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.