2026-08-09_965365f184d4f9d39090098220789221_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_965365f184d4f9d39090098220789221_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom_vidar
Size 24.6MB
Sample260809-yd7a7acp5w
SHA256 d76472bf5aa503b7a471e55b996f1f7d7fc638a25c99dceca12477de135112f9
MD5 965365f184d4f9d39090098220789221
SHA1 95ae700a58b37958a61bf32bba370a8c63e715f3
SHA512 a582305465f5c42c5a83201ed682346a8d7052a57d544cf22e87db20f4933fc2d6a1f1433165cb789cd630e2428229de43151c850f9e4c6532e20b76b130b265
SSDEEP 393216:bNRJWOZnYdYolVTrF7fPMLCO6q30+0CWLWG5jf4i/zGXMF:b5Z7olfYCwZWiCf4i/zB
TLSH
T1C6471203F6A541EEE49BC13492475E23FA32BC694620A3DB16D4BBA17F72F601E2C355
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_965365f184d4f9d39090098220789221_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom_vidar

File Explorer

2026-08-09_965365f184d4f9d39090098220789221_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom_vidar

.exe 24.6MB

2026-08-09_965365f184d4f9d39090098220789221_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom_vidar

SHA256 d76472bf5aa503b7a471e55b996f1f7d7fc638a25c99dceca12477de135112f9
MD5 965365f184d4f9d39090098220789221
SHA1 95ae700a58b37958a61bf32bba370a8c63e715f3
SHA512 a582305465f5c42c5a83201ed682346a8d7052a57d544cf22e87db20f4933fc2d6a1f1433165cb789cd630e2428229de43151c850f9e4c6532e20b76b130b265
SSDEEP 393216:bNRJWOZnYdYolVTrF7fPMLCO6q30+0CWLWG5jf4i/zGXMF:b5Z7olfYCwZWiCf4i/zB
TLSH
T1C6471203F6A541EEE49BC13492475E23FA32BC694620A3DB16D4BBA17F72F601E2C355
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3042684

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.texter2

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdebna

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.d032wa

Size

24KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pw24ew

Size

71KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.relew1

Size

27KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rgwq

Size

20.4MB

Virtual Size

20.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.denbit1

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.cambene

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.ghe2wq

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.banite

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.kelinga

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.edfege

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.menetre

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_965365f184d4f9d39090098220789221_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom_vidar

generic