General
- Target 2026-08-09_0f8e3672307d726baa7eb1dfdb8b3ecc_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 3.6MB
- Sample260809-ncffzadr9z
- SHA256 a8bff2438de535da728e8ae25edcbe78819627a9b68c48e7016afd36d958d42c
- MD5 0f8e3672307d726baa7eb1dfdb8b3ecc
- SHA1 4d1b0d758361b4667d207b5e9b5c2e12e93b93d4
- SHA512 b6d4a924ef2fafaf68a2f0e6861f08da48cc8928b4ab5aef443f004680c8d740ff8280e253a5868f5dc54139d7267fd15d01723ea38388f299f61a9810d7ef3e
- SSDEEP 98304:9L0dHS/XxnYk3bUlgY/xaIPopx/XA3LFpprO3w1N2n3/2+UMxzVX:aM3w1NK/SMxzV
- TLSH T166067C07F3A580E9D46AC478C20BA237FB72F8496635B69B17D45F262F63B602B1D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_0f8e3672307d726baa7eb1dfdb8b3ecc_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_0f8e3672307d726baa7eb1dfdb8b3ecc_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_0f8e3672307d726baa7eb1dfdb8b3ecc_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 3.6MB
- SHA256 a8bff2438de535da728e8ae25edcbe78819627a9b68c48e7016afd36d958d42c
- MD5 0f8e3672307d726baa7eb1dfdb8b3ecc
- SHA1 4d1b0d758361b4667d207b5e9b5c2e12e93b93d4
- SHA512 b6d4a924ef2fafaf68a2f0e6861f08da48cc8928b4ab5aef443f004680c8d740ff8280e253a5868f5dc54139d7267fd15d01723ea38388f299f61a9810d7ef3e
- SSDEEP 98304:9L0dHS/XxnYk3bUlgY/xaIPopx/XA3LFpprO3w1N2n3/2+UMxzVX:aM3w1NK/SMxzV
- TLSH T166067C07F3A580E9D46AC478C20BA237FB72F8496635B69B17D45F262F63B602B1D314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.