2026-08-10_d54e1b6747ba2871953f5f50ed287ac7_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_d54e1b6747ba2871953f5f50ed287ac7_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom
Size 13.1MB
Sample260810-cavbkayfle
SHA256 1ebedaaaa42529456b01bf8be7e4f0d5ed3486a1bc1f68d15b255286d98b0f39
MD5 d54e1b6747ba2871953f5f50ed287ac7
SHA1 d3866b675f721624211db4645af55e06da54ed1e
SHA512 7745999cf5d66d32a3b81c424aca4f8ea53b82b577c65282b442cad8228aba2b9e8bca88724f25b3a2646737e15f4d75eec0bc340ad0fd631a544987f6479825
SSDEEP 98304:D5LExjeDtmNIg/05jw+L1URDcxbFyWPs7QdjLF1c3vgoILkfR+VYtwE2evsGW/76:D5LExjeDkw5jkD0Fw5Y8W7c
TLSH
T1E4D6D6217A5A996CD09BC474838B8A72497130CB0B39B9FF449496383F6DBF46F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_d54e1b6747ba2871953f5f50ed287ac7_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom

File Explorer

2026-08-10_d54e1b6747ba2871953f5f50ed287ac7_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom

.exe 13.1MB

2026-08-10_d54e1b6747ba2871953f5f50ed287ac7_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom

IMPHASH 79d0c6f6b8c9da7b9ca1f2a6f1f69ce0
SHA256 1ebedaaaa42529456b01bf8be7e4f0d5ed3486a1bc1f68d15b255286d98b0f39
MD5 d54e1b6747ba2871953f5f50ed287ac7
SHA1 d3866b675f721624211db4645af55e06da54ed1e
SHA512 7745999cf5d66d32a3b81c424aca4f8ea53b82b577c65282b442cad8228aba2b9e8bca88724f25b3a2646737e15f4d75eec0bc340ad0fd631a544987f6479825
SSDEEP 98304:D5LExjeDtmNIg/05jw+L1URDcxbFyWPs7QdjLF1c3vgoILkfR+VYtwE2evsGW/76:D5LExjeDkw5jkD0Fw5Y8W7c
TLSH
T1E4D6D6217A5A996CD09BC474838B8A72497130CB0B39B9FF449496383F6DBF46F38359
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9389820

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

mint_launcher.pdb

bcryptprimitives

ProcessPrng

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey RegGetValueW CredFree EventRegister SystemFunction036 CredDeleteW CredReadW EventUnregister CredWriteW EventWriteTransfer EventSetInformation

ntdll

NtCreateNamedPipeFile RtlNtStatusToDosError NtWriteFile NtOpenFile NtReadFile RtlGetVersion NtCancelIoFileEx NtDeviceIoControlFile NtCreateFile

kernel32

FlsFree EncodePointer InitializeSListHead SetUnhandledExceptionFilter RtlUnwindEx FlsGetValue GetModuleHandleW RtlLookupFunctionEntry RtlCaptureContext FlsAlloc RaiseException RtlPcToFileHeader GetFullPathNameW GetSystemTimeAsFileTime TerminateProcess GetExitCodeProcess GetSystemInfo GetSystemTimePreciseAsFileTime WriteFileEx CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW CompareStringOrdinal FreeEnvironmentStringsW CreateThread SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP GetStdHandle WriteConsoleW MultiByteToWideChar QueryPerformanceFrequency SleepEx ReadFileEx ExitProcess GetTempPathW SetEnvironmentVariableW FindClose GetCurrentThreadId GetFinalPathNameByHandleW GetUserDefaultUILanguage LCIDToLocaleName lstrlenW DeleteFileW SwitchToThread GetFileInformationByHandleEx CreateDirectoryW MoveFileExW GetCommandLineW GetEnvironmentStringsW GetCurrentDirectoryW SetLastError GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler WaitForSingleObject SetFileInformationByHandle SetFilePointerEx SleepConditionVariableSRW WakeAllConditionVariable ReleaseMutex CreateMutexA GetCurrentProcessId GetFileAttributesW OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetProcessHeap HeapFree LoadLibraryExW WaitForSingleObjectEx WideCharToMultiByte HeapReAlloc GetEnvironmentVariableW AcquireSRWLockExclusive RtlVirtualUnwind QueryPerformanceCounter GlobalMemoryStatusEx GetPhysicallyInstalledSystemMemory FreeLibrary FlsSetValue LoadLibraryW ReleaseSRWLockExclusive GetVolumeInformationW LoadLibraryA GetModuleHandleA Sleep LoadLibraryExA GetLastError HeapAlloc GetProcAddress CloseHandle InitializeCriticalSectionEx GetQueuedCompletionStatusEx FindFirstFileExW FormatMessageW FindNextFileW CreateFileW DeviceIoControl CancelIoEx SetNamedPipeHandleState GetFileInformationByHandle GetConsoleMode UnregisterWaitEx GetCurrentProcess DuplicateHandle RegisterWaitForSingleObject WriteFile ReadFile PostQueuedCompletionStatus GetOverlappedResult SetFileCompletionNotificationModes CreateIoCompletionPort SetHandleInformation DeleteCriticalSection

user32

VkKeyScanW DrawTextW GetWindowDC OffsetRect GetMenuBarInfo DestroyMenu DrawIconEx CheckMenuItem RemoveMenu DispatchMessageW CreatePopupMenu CreateMenu SetMenu DrawMenuBar SetMenuItemInfoW AppendMenuW InsertMenuW TrackPopupMenu PostQuitMessage CreateAcceleratorTableW PeekMessageW PostThreadMessageW DefWindowProcW ScreenToClient DestroyAcceleratorTable GetMenuItemInfoW CreateIcon GetAsyncKeyState GetKeyboardState GetMessageA ToUnicodeEx GetKeyState GetWindowLongW SetWindowTextW DispatchMessageA GetWindowTextLengthW SendInput SetForegroundWindow GetMenu IsWindowVisible GetRawInputData GetClientRect GetKeyboardLayout SystemParametersInfoA SetPropW SetWindowLongW EnableMenuItem GetSystemMenu ClipCursor ClientToScreen GetClipCursor MonitorFromRect FillRect ShowCursor EnumDisplayMonitors MonitorFromPoint SystemParametersInfoW SetWindowDisplayAffinity GetMessageW RegisterRawInputDevices ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx TranslateMessage EnumChildWindows RegisterWindowMessageA SetParent MapWindowPoints GetWindow SetFocus ShowWindow EnableWindow IsWindowEnabled PostMessageW ReleaseDC TrackMouseEvent GetTouchInputInfo GetDC IsProcessDPIAware GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn DestroyWindow IsIconic SetWindowPos CreateWindowExW SendMessageW RedrawWindow RegisterClassExW AdjustWindowRect GetWindowTextW TranslateAcceleratorW GetForegroundWindow MapVirtualKeyExW RegisterTouchWindow IsWindow AdjustWindowRectEx FlashWindowEx GetActiveWindow UpdateWindow InvalidateRect SetCursorPos DestroyIcon LoadCursorW InvalidateRgn GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW GetUpdateRect MapVirtualKeyW ValidateRect GetMonitorInfoW MonitorFromWindow GetCursorPos SetCursor GetSystemMetrics CloseTouchInputHandle EnumDisplayDevicesW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ole32

CoCreateInstance CoInitializeEx CoInitialize CoTaskMemFree CoUninitialize OleInitialize CoTaskMemAlloc CoCreateFreeThreadedMarshaler RegisterDragDrop RevokeDragDrop

comctl32

RemoveWindowSubclass TaskDialogIndirect SetWindowSubclass DefSubclassProc

shlwapi

SHCreateMemStream

gdi32

DeleteObject SetTextColor CreateCompatibleDC SelectObject CreateDIBSection SetBkMode BitBlt CreateRectRgn CreateSolidBrush GetDeviceCaps CombineRgn DeleteDC

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute

shell32

SHAppBarMessage ShellExecuteExW DragQueryFileW DragFinish ShellExecuteW SHOpenFolderAndSelectItems SHGetKnownFolderPath SHCreateItemFromParsingName ILCreateFromPathW ILFree

oleaut32

SetErrorInfo SysStringLen GetErrorInfo SysFreeString

ws2_32

connect WSACleanup freeaddrinfo getaddrinfo shutdown ioctlsocket WSAIoctl WSAGetLastError closesocket getsockopt getpeername getsockname WSASocketW bind recv setsockopt WSASend WSAStartup send

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

trunc pow round floor __setusermatherr roundf

api-ms-win-crt-string-l1-1-0

strcpy_s wcslen _wcsicmp wcscmp

api-ms-win-crt-convert-l1-1-0

_wtoi _ultow_s wcstol

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _set_app_type __p___argc __p___argv _seh_filter_exe _get_initial_narrow_environment _cexit _initialize_narrow_environment _c_exit _register_thread_local_exe_atexit_callback _initterm _initterm_e _initialize_onexit_table exit _register_onexit_function abort _exit _crt_atexit terminate

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc _callnewh _set_new_mode calloc free

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_d54e1b6747ba2871953f5f50ed287ac7_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom

bcryptprimitives

advapi32

ntdll

kernel32

user32

api-ms-win-core-synch-l1-2-0

ole32

comctl32

shlwapi

gdi32

dwmapi

shell32

oleaut32

ws2_32

bcrypt

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic