2026-08-10_8e863ed74f30d1e4c74d1adbe8a906a4_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_8e863ed74f30d1e4c74d1adbe8a906a4_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 15.3MB
Sample260810-e2jp9avyhv
SHA256 d358499d0d2b82a700580c2cd329cbc3ddfa606f117555e0156f769c38dc6499
MD5 8e863ed74f30d1e4c74d1adbe8a906a4
SHA1 8dc6d5960d2d4b13d066676bc842c307a0e354db
SHA512 00cca2fa3b8ba49eabedc651fcd4088fa6f024a1ed308fa1d42dee5c4c2b968233d2ef49001db8d9765c82c0da0bdcf08d43f251ce95e9552bbada5aebef10b8
SSDEEP 196608:lZ9Sav6m1OQ3Xgm0wFdO6if6rukbtOMKVHAZ:X9Sav6m1OQ3Xgm0wFAIVbtOb9C
TLSH
T10BF607257B5B99ACD09BC47483478A62493130CB0B35B9FF44C896392F7ABF56F38219
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_8e863ed74f30d1e4c74d1adbe8a906a4_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-08-10_8e863ed74f30d1e4c74d1adbe8a906a4_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 15.3MB

2026-08-10_8e863ed74f30d1e4c74d1adbe8a906a4_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 38558d72c6e20d987b231cd2153da1e6
SHA256 d358499d0d2b82a700580c2cd329cbc3ddfa606f117555e0156f769c38dc6499
MD5 8e863ed74f30d1e4c74d1adbe8a906a4
SHA1 8dc6d5960d2d4b13d066676bc842c307a0e354db
SHA512 00cca2fa3b8ba49eabedc651fcd4088fa6f024a1ed308fa1d42dee5c4c2b968233d2ef49001db8d9765c82c0da0bdcf08d43f251ce95e9552bbada5aebef10b8
SSDEEP 196608:lZ9Sav6m1OQ3Xgm0wFdO6if6rukbtOMKVHAZ:X9Sav6m1OQ3Xgm0wFAIVbtOb9C
TLSH
T10BF607257B5B99ACD09BC47483478A62493130CB0B35B9FF44C896392F7ABF56F38219
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10236720

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

pomodoroz_tauri.pdb

bcryptprimitives

ProcessPrng

kernel32

EncodePointer GetFileAttributesW OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetProcessHeap HeapFree LoadLibraryExW FreeLibrary LoadLibraryA GetModuleHandleA FlsGetValue LoadLibraryW GetNativeSystemInfo GetSystemInfo GetUserPreferredUILanguages FlsAlloc RaiseException GetFullPathNameW SetFileCompletionNotificationModes FlsFree RtlPcToFileHeader GetModuleHandleW GetLastError SetHandleInformation lstrlenW GetUserDefaultUILanguage SetEvent WaitForMultipleObjectsEx SetThreadPriority GetCurrentThread CreateEventA CloseHandle GetConsoleMode GetFileInformationByHandle GetQueuedCompletionStatusEx CancelIoEx WriteFile GetOverlappedResult LoadLibraryExA HeapAlloc ReadFile FormatMessageW PostQueuedCompletionStatus CreateIoCompletionPort GetSystemTimeAsFileTime SleepConditionVariableSRW CreateMutexW GetComputerNameExW CreateFileW SetNamedPipeHandleState WakeAllConditionVariable GetCurrentThreadId AcquireSRWLockExclusive ReleaseSRWLockExclusive GetProcAddress Sleep LCIDToLocaleName FlsSetValue ReleaseMutex RtlUnwindEx SetUnhandledExceptionFilter InitializeSListHead InitializeCriticalSectionEx DeleteCriticalSection RtlVirtualUnwind GetEnvironmentVariableW CompareStringOrdinal FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError SetFileInformationByHandle SetFileTime HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread GetCurrentProcessId ReadFileEx GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry GetSystemTimePreciseAsFileTime GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetEnvironmentStringsW GetStdHandle CreateDirectoryW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentDirectoryW GetCommandLineW FindFirstFileExW FindClose ExitProcess SwitchToThread WideCharToMultiByte WaitForSingleObjectEx CreateMutexA GetFinalPathNameByHandleW CreateSymbolicLinkW DeviceIoControl DeleteFileW SetEnvironmentVariableW MultiByteToWideChar WriteConsoleW FindNextFileW GetTempPathW SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP

advapi32

RegGetValueW RegCloseKey RegDeleteValueW RegSetValueExW RegQueryValueExW RegOpenKeyExW EventWriteTransfer EventSetInformation EventRegister SystemFunction036 EventUnregister

ntdll

NtCreateNamedPipeFile NtDeviceIoControlFile NtCreateFile RtlGetVersion NtOpenFile NtWriteFile NtReadFile NtCancelIoFileEx RtlNtStatusToDosError

user32

MsgWaitForMultipleObjectsEx GetRawInputData RegisterRawInputDevices RegisterWindowMessageA GetWindow SetParent MapWindowPoints SetFocus ShowWindow SetWindowDisplayAffinity SetCapture CreateIcon MonitorFromPoint EnumDisplayMonitors IsWindowVisible ReleaseCapture EnableWindow IsWindowEnabled GetWindowRect GetParent FindWindowExW SetWindowRgn ClipCursor ReleaseDC ShowCursor GetDC IsProcessDPIAware GetMenu GetWindowTextLengthW GetWindowTextW VkKeyScanW EnableMenuItem DestroyMenu GetClipCursor PostQuitMessage RemoveMenu GetAsyncKeyState RegisterHotKey RegisterClassW UnregisterHotKey AppendMenuW InsertMenuW CheckMenuItem SetWindowLongPtrW GetWindowLongPtrW SetMenuItemInfoW TranslateAcceleratorW GetSystemMenu CreateAcceleratorTableW SendInput SetForegroundWindow DestroyAcceleratorTable CreatePopupMenu CreateMenu DrawIconEx CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW FillRect DrawMenuBar GetMonitorInfoW SetMenu DrawTextW RegisterClassExW GetWindowDC CreateWindowExW SendMessageW OffsetRect AdjustWindowRect RedrawWindow GetMenuBarInfo SetWindowPos GetMenuItemInfoW MonitorFromRect MonitorFromWindow GetCursorPos GetClientRect GetWindowLongW ScreenToClient GetUpdateRect ValidateRect SetWindowTextW SetTimer GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos KillTimer ClientToScreen FlashWindowEx SetCursor LoadCursorW InvalidateRgn GetWindowPlacement SetWindowPlacement PeekMessageW ChangeDisplaySettingsExW TrackPopupMenu DestroyIcon ChangeWindowMessageFilterEx DestroyWindow DefWindowProcW PostThreadMessageW MapVirtualKeyW PostMessageW DispatchMessageW GetMessageW GetKeyboardLayout ToUnicodeEx MapVirtualKeyExW GetKeyState GetKeyboardState SystemParametersInfoA RegisterTouchWindow GetSystemMetrics IsWindow AdjustWindowRectEx IsIconic EnumChildWindows SetWindowLongW FindWindowW DispatchMessageA TranslateMessage GetMessageA SetPropW

ole32

CoUninitialize PropVariantClear CoIncrementMTAUsage CoInitialize CoTaskMemAlloc CoInitializeEx CoCreateFreeThreadedMarshaler CoCreateInstance RevokeDragDrop RegisterDragDrop OleInitialize CoTaskMemFree

gdi32

CreateSolidBrush CreateCompatibleDC DeleteDC SetTextColor SelectObject CreateDIBSection SetBkMode BitBlt CombineRgn GetDeviceCaps CreateRectRgn DeleteObject

dwmapi

DwmGetWindowAttribute DwmSetWindowAttribute DwmEnableBlurBehindWindow

comctl32

DefSubclassProc TaskDialogIndirect SetWindowSubclass RemoveWindowSubclass

shlwapi

SHCreateMemStream

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

shell32

SHCreateItemFromParsingName ShellExecuteExW SHGetKnownFolderPath Shell_NotifyIconGetRect ILCreateFromPathW ILFree ShellExecuteW Shell_NotifyIconW SHOpenFolderAndSelectItems DragQueryFileW DragFinish SHAppBarMessage

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

oleaut32

GetErrorInfo SetErrorInfo SysFreeString SysStringLen

ws2_32

WSAStartup getaddrinfo freeaddrinfo WSAGetLastError WSAIoctl setsockopt shutdown bind WSASocketW WSACleanup send recv connect ioctlsocket WSASend getsockopt getsockname getpeername closesocket

crypt32

CertGetCertificateChain CertAddEncodedCertificateToStore CertOpenStore CertFreeCertificateChain CertVerifyCertificateChainPolicy CertCloseStore CertFreeCertificateChainEngine CertCreateCertificateChainEngine CertFreeCertificateContext CertSetCertificateContextProperty

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

round __setusermatherr fmod floor trunc ceilf pow roundf

api-ms-win-crt-string-l1-1-0

_wcsicmp strlen wcslen wcscmp strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstol _wtoi _ultow_s

api-ms-win-crt-runtime-l1-1-0

_c_exit _initterm _initialize_onexit_table _register_onexit_function _crt_atexit terminate _cexit __p___argv __p___argc abort _seh_filter_exe _set_app_type _initterm_e _initialize_narrow_environment _exit exit _register_thread_local_exe_atexit_callback _configure_narrow_argv _get_initial_narrow_environment

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc _callnewh free calloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_8e863ed74f30d1e4c74d1adbe8a906a4_akira_cobalt-strike_glassworm_rusty-stealer_satacom

bcryptprimitives

kernel32

advapi32

ntdll

user32

ole32

gdi32

dwmapi

comctl32

shlwapi

api-ms-win-core-synch-l1-2-0

shell32

api-ms-win-core-winrt-l1-1-0

oleaut32

ws2_32

crypt32

bcrypt

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic