2026-08-10_15aa067ddda6c7ec45f191f011230fab_akira_cobalt-strike_glassworm_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_15aa067ddda6c7ec45f191f011230fab_akira_cobalt-strike_glassworm_satacom_vidar
Size 5.7MB
Sample260810-hjkflstanh
SHA256 475381bd4082037d9761561f7b10ac4f5df2f0c61235b5b75b920f7ca22201ab
MD5 15aa067ddda6c7ec45f191f011230fab
SHA1 7613da87425c6d1e4e7a79943325d93d8a0dc349
SHA512 e95c79c6f1979c12749f2ab03eab43a976cf9df54ef7935d1644336e6d9c3d50d681d90080891663d5bc1b92a6b6b2b1275dd90b64f3a28292a3ead840056424
SSDEEP 49152:+A+jAJjNv5HlLFEplP9WIfS70Bs/3eLVcCtqyfbr+ijkwtmUNmqYhBJnF/mcmiIC:Dz8UR4xwqYd1pqHcSEYax
TLSH
T197564B21BF9A99EDC05AC07483464B726A71B0CA0B35BAFF45D486743E69AF41F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_15aa067ddda6c7ec45f191f011230fab_akira_cobalt-strike_glassworm_satacom_vidar

File Explorer

2026-08-10_15aa067ddda6c7ec45f191f011230fab_akira_cobalt-strike_glassworm_satacom_vidar

.exe 5.7MB

2026-08-10_15aa067ddda6c7ec45f191f011230fab_akira_cobalt-strike_glassworm_satacom_vidar

IMPHASH 1565994db30b082bdfd778cc9ad5eab6
SHA256 475381bd4082037d9761561f7b10ac4f5df2f0c61235b5b75b920f7ca22201ab
MD5 15aa067ddda6c7ec45f191f011230fab
SHA1 7613da87425c6d1e4e7a79943325d93d8a0dc349
SHA512 e95c79c6f1979c12749f2ab03eab43a976cf9df54ef7935d1644336e6d9c3d50d681d90080891663d5bc1b92a6b6b2b1275dd90b64f3a28292a3ead840056424
SSDEEP 49152:+A+jAJjNv5HlLFEplP9WIfS70Bs/3eLVcCtqyfbr+ijkwtmUNmqYhBJnF/mcmiIC:Dz8UR4xwqYd1pqHcSEYax
TLSH
T197564B21BF9A99EDC05AC07483464B726A71B0CA0B35BAFF45D486743E69AF41F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3847660

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

jorlavind_desktop.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ntdll

RtlNtStatusToDosError NtCancelIoFileEx NtDeviceIoControlFile NtCreateFile NtWriteFile RtlCaptureContext NtReadFile RtlVirtualUnwind RtlLookupFunctionEntry

ws2_32

WSASocketW bind ioctlsocket listen accept getsockname getpeername shutdown send WSASend setsockopt closesocket WSAStartup WSACleanup recv WSAIoctl freeaddrinfo WSAGetLastError getaddrinfo

kernel32

DuplicateHandle GetCurrentProcess GetTimeZoneInformationForYear lstrlenW OpenProcess CloseHandle UnhandledExceptionFilter CreateIoCompletionPort GetQueuedCompletionStatusEx SetUnhandledExceptionFilter PostQueuedCompletionStatus IsProcessorFeaturePresent SetFileCompletionNotificationModes SetConsoleCtrlHandler GetModuleHandleA GetProcAddress GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent FreeEnvironmentStringsW DeleteProcThreadAttributeList CompareStringOrdinal GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee SwitchToThread CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject QueryPerformanceCounter GetSystemInfo SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW Sleep SetFileInformationByHandle SetFilePointerEx SetHandleInformation GetStdHandle GetCurrentProcessId WriteFileEx SleepEx TerminateProcess QueryPerformanceFrequency GetSystemTimePreciseAsFileTime HeapFree CreateMutexA HeapReAlloc ReleaseMutex GetProcessHeap HeapAlloc FindNextFileW FindClose CreateFileW GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW FindFirstFileW DeleteFileW GetFinalPathNameByHandleW CopyFileExW GetConsoleMode LoadLibraryA GetModuleHandleW FormatMessageW GetModuleFileNameW ExitProcess CreateNamedPipeW ReadFileEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW InitializeProcThreadAttributeList UpdateProcThreadAttribute MultiByteToWideChar WriteConsoleW CreateThread GetCurrentThread GetFullPathNameW GetTempPathW WaitForSingleObjectEx

user32

PostMessageW IsWindow CallNextHookEx EnumWindows GetSystemMetrics LoadCursorW RegisterClassExW CreateWindowExW ShowWindow UpdateWindow SetParent SetWindowPos GetWindowLongPtrW SetWindowLongPtrW SetLayeredWindowAttributes SetWindowsHookExW GetMessageW TranslateMessage DispatchMessageW IsWindowVisible GetClassNameW GetWindowThreadProcessId SendMessageW DefWindowProcW PostQuitMessage GetParent

gdi32

CreateSolidBrush

psapi

GetModuleFileNameExW

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

vcruntime140

__current_exception_context memset __C_specific_handler __current_exception memcmp memmove __CxxFrameHandler3 memcpy _CxxThrowException

api-ms-win-crt-math-l1-1-0

log pow __setusermatherr

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-heap-l1-1-0

_set_new_mode free malloc

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _register_thread_local_exe_atexit_callback _c_exit _cexit _crt_atexit __p___argc _seh_filter_exe _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv terminate _set_app_type __p___argv

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_15aa067ddda6c7ec45f191f011230fab_akira_cobalt-strike_glassworm_satacom_vidar

bcryptprimitives

api-ms-win-core-synch-l1-2-0

ntdll

ws2_32

kernel32

user32

gdi32

psapi

shell32

ole32

bcrypt

advapi32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic