2026-08-09_8b8fca7ea46d84be23fcfbeeffb508e5_akira_cobalt-strike_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_8b8fca7ea46d84be23fcfbeeffb508e5_akira_cobalt-strike_satacom
Size 609KB
Sample260809-fxbphsgg98
SHA256 1132fa33d2a38c8e8534e6fb74388878853114e9674635393d1280bbf27485e1
MD5 8b8fca7ea46d84be23fcfbeeffb508e5
SHA1 de9a992462d3f390387e5e989876bd9291379998
SHA512 a473655fa37e8a3d172e527a7af076f6362dd18ea0a888dd792792ef55d3ae3155cb6e0ed115ae8da16ed8b181c7a7c98fe0f5326345212e46aafa9b5c6fedc8
SSDEEP 12288:cF0Vj+4vsY5evTlEi7ThwRHFYP2zqqqqqqqqqqqqq6eq:00VaisMehjCHFYPoZ
TLSH
T13FD43919D65AD0E4E07AE17DC143D6B2E962BC51C3249BCB02E0BD673F37BE09A39245
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-09_8b8fca7ea46d84be23fcfbeeffb508e5_akira_cobalt-strike_satacom

.exe 609KB

2026-08-09_8b8fca7ea46d84be23fcfbeeffb508e5_akira_cobalt-strike_satacom

IMPHASH d880a5773967ce10a6953be52dff6c83
SHA256 1132fa33d2a38c8e8534e6fb74388878853114e9674635393d1280bbf27485e1
MD5 8b8fca7ea46d84be23fcfbeeffb508e5
SHA1 de9a992462d3f390387e5e989876bd9291379998
SHA512 a473655fa37e8a3d172e527a7af076f6362dd18ea0a888dd792792ef55d3ae3155cb6e0ed115ae8da16ed8b181c7a7c98fe0f5326345212e46aafa9b5c6fedc8
SSDEEP 12288:cF0Vj+4vsY5evTlEi7ThwRHFYP2zqqqqqqqqqqqqq6eq:00VaisMehjCHFYPoZ
TLSH
T13FD43919D65AD0E4E07AE17DC143D6B2E962BC51C3249BCB02E0BD673F37BE09A39245
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

e2:b5:57:10:a5:5b:5f:72:6f:42:c1:9e:03:84:14:91:60:d8:74:d2:9a:e2:04:db:3e:40:a7:dd:01:83:55:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 6, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1d:4d:19:c8:4e:d7:0f:57:48:00:00:00:00:02:1d

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A400-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:28:f0:a5:87:d7:f3:c8:1e:40:00:01:00:00:02:28

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Feb 19, 2026 - May 17, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

Major OS version

Entry point

83728

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\a\_work\1\s\bin\x64\Release\WindowsTerminal\WindowsTerminal.pdb

terminalthemehelpers

TerminalTrySetAutoCompleteAnimationsWhenOccluded TerminalTrySetTransparentBackground

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExW GetModuleHandleExW GetModuleFileNameW GetModuleHandleW LoadStringW GetProcAddress FreeLibrary GetModuleFileNameA

api-ms-win-core-synch-l1-1-0

CreateMutexExW WaitForSingleObjectEx ReleaseSRWLockExclusive AcquireSRWLockExclusive ReleaseMutex ReleaseSRWLockShared OpenSemaphoreW CreateMutexW DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection WaitForSingleObject ReleaseSemaphore CreateSemaphoreExW AcquireSRWLockShared

api-ms-win-core-heap-l1-1-0

HeapAlloc GetProcessHeap HeapFree

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter SetLastError GetLastError RaiseException

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId GetCurrentProcessId ExitProcess ProcessIdToSessionId TerminateProcess GetStartupInfoW SwitchToThread GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW GetLocaleInfoEx FormatMessageA

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent DebugBreak OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-string-l1-1-0

WideCharToMultiByte CompareStringOrdinal MultiByteToWideChar

api-ms-win-core-wow64-l1-1-1

IsWow64Process2

api-ms-win-eventing-provider-l1-1-0

EventRegister EventWriteTransfer EventSetInformation

api-ms-win-core-console-l1-1-0

SetConsoleCtrlHandler

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-ntuser-sysparams-l1-1-0

GetMonitorInfoW SystemParametersInfoW GetSystemMetrics EnumDisplayMonitors

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer WaitForThreadpoolTimerCallbacks TrySubmitThreadpoolCallback SetThreadpoolTimer CloseThreadpoolTimer

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler CoInitializeEx CoTaskMemAlloc CoGetApartmentType CoGetObjectContext PropVariantClear CoCreateInstance CoTaskMemFree

api-ms-win-core-registry-l1-1-0

RegQueryValueExW RegCloseKey RegOpenKeyExW

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentPackageId

api-ms-win-security-base-l1-1-0

CheckTokenMembership GetTokenInformation GetLengthSid

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

api-ms-win-core-processenvironment-l1-1-0

FreeEnvironmentStringsW GetCurrentDirectoryW GetEnvironmentStringsW GetCommandLineW ExpandEnvironmentStringsW SetCurrentDirectoryW

api-ms-win-core-synch-l1-2-0

Sleep WakeAllConditionVariable SleepConditionVariableSRW

api-ms-win-core-file-l1-1-0

CreateFileW FindClose FindFirstFileExW FindNextFileW SetFileInformationByHandle

api-ms-win-shcore-sysinfo-l1-1-0

SetCurrentProcessExplicitAppUserModelID

ext-ms-win-shell32-shellfolders-l1-1-0

SHGetKnownFolderPath

api-ms-win-core-windowserrorreporting-l1-1-3

RegisterApplicationRestart

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW GetSystemTimeAsFileTime

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW K32GetModuleFileNameExW

api-ms-win-core-heap-l2-1-0

LocalFree

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute

uxtheme

BeginBufferedPaint BufferedPaintSetAlpha EndBufferedPaint

user32

DestroyMenu TrackPopupMenuEx AppendMenuW SetMenuInfo CreatePopupMenu RegisterWindowMessageW GetAncestor DispatchMessageW TranslateMessage GetMessageW SetParent AllowSetForegroundWindow FindWindowW FillRect BeginPaint EndPaint SetCursor GetMessagePos GetSystemMetricsForDpi SetLayeredWindowAttributes TrackMouseEvent RegisterClassExW GetWindowLongPtrW GetWindow SetWindowTextW GetClientRect DefWindowProcW EnableNonClientDpiScaling DeleteMenu GetMenuItemCount RegisterHotKey InsertMenuItemW TrackPopupMenu UnregisterHotKey GetSystemMenu SetMenuItemInfoW MonitorFromPoint SetActiveWindow BringWindowToTop GetWindowThreadProcessId SendMessageTimeoutW AttachThreadInput SetWindowPlacement IsWindowVisible SetWindowRgn GetForegroundWindow OffsetRect SetWindowLongW FlashWindow IsIconic InvalidateRect AdjustWindowRectExForDpi GetWindowLongW SetFocus MonitorFromWindow UpdateWindow CreateWindowExW RegisterClassW LoadIconW LoadCursorW SetWindowLongPtrW ShowCursor GetWindowRect GetDpiForWindow IsZoomed SetForegroundWindow ShowWindow PostQuitMessage GetKeyState PostMessageW GetWindowPlacement GetCursorPos SetWindowPos MonitorFromRect SendMessageW DestroyWindow EnableMouseInPointer MessageBoxW GetSysColor LoadImageW GetMenuItemID SetMenuDefaultItem

gdi32

CreateSolidBrush DeleteObject CreateRectRgn GetStockObject

shell32

Shell_NotifyIconW SHAppBarMessage

api-ms-win-crt-runtime-l1-1-0

_initterm _crt_atexit exit _initialize_wide_environment _configure_wide_argv _exit _register_onexit_function _set_app_type _errno _c_exit _invalid_parameter_noinfo _register_thread_local_exe_atexit_callback abort _seh_filter_exe _cexit _initialize_onexit_table _get_wide_winmain_command_line terminate _initterm_e

api-ms-win-crt-string-l1-1-0

wcsnlen iswspace wcscmp strlen wcslen strcpy_s

api-ms-win-crt-stdio-l1-1-0

__p__commode __stdio_common_vswprintf _set_fmode

api-ms-win-crt-math-l1-1-0

ceilf lrintf _ldclass _fdclass _dclass lroundf __setusermatherr _dsign

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode calloc malloc free

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _lock_locales _unlock_locales ___lc_locale_name_func _wsetlocale ___mb_cur_max_func _configthreadlocale __pctype_func localeconv setlocale

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask GetSystemTimePreciseAsFileTime

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader RtlUnwindEx

api-ms-win-core-file-l1-2-0

CreateFile2

api-ms-win-core-file-l1-2-2

AreFileApisANSI

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead InterlockedPushEntrySList

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-fibers-l1-1-0

FlsSetValue FlsFree FlsAlloc FlsGetValue

oleaut32

SetErrorInfo GetErrorInfo SysFreeString SysStringLen

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-error-l1-1-0

RoTransformError

api-ms-win-core-com-l1-1-1

RoGetAgileReference

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_8b8fca7ea46d84be23fcfbeeffb508e5_akira_cobalt-strike_satacom

terminalthemehelpers

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-wow64-l1-1-1

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-console-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-shcore-scaling-l1-1-1

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-largeinteger-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-appmodel-runtime-l1-1-0

api-ms-win-security-base-l1-1-0

api-ms-win-shcore-obsolete-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-file-l1-1-0

api-ms-win-shcore-sysinfo-l1-1-0

ext-ms-win-shell32-shellfolders-l1-1-0

api-ms-win-core-windowserrorreporting-l1-1-3

api-ms-win-security-sddl-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-heap-l2-1-0

dwmapi

uxtheme

user32

gdi32

shell32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-kernel32-legacy-l1-1-1

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-file-l1-2-0

api-ms-win-core-file-l1-2-2

api-ms-win-core-file-l2-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-fibers-l1-1-0

oleaut32

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-com-l1-1-1

generic