2026-08-10_9ba0e02a7187bbab50546fb7ee6061f1_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_9ba0e02a7187bbab50546fb7ee6061f1_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 30.2MB
Sample260810-lyv3fawdpg
SHA256 4a2a5d490507a7ba09e2a3b82a9ed8728e60267aeb8f758c21ca8b0577751fea
MD5 9ba0e02a7187bbab50546fb7ee6061f1
SHA1 0ec88612c2602b11a0ac69a10be46a8a2f9a46d2
SHA512 d86613e203783bb947a8db406d88c458b36c438fa22339529aec6d265250106a7b289ba4e22eb3d4f2b69d28a691759f418fc5dcc98ef8536765f1bad45915ad
SSDEEP 196608:VnT3AEqkoxDLJeHEOuqQ9mPl12EZ7NYYVLKrzYmk:lUhd1OK4vFNhVkz2
TLSH
T1DE67D916B67954D9D17BC07882838E22692074DE0B353BF779DC827A2F28EF9693C354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_9ba0e02a7187bbab50546fb7ee6061f1_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-08-10_9ba0e02a7187bbab50546fb7ee6061f1_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 30.2MB

2026-08-10_9ba0e02a7187bbab50546fb7ee6061f1_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 5c29017067a4f4a9383848c9652e421b
SHA256 4a2a5d490507a7ba09e2a3b82a9ed8728e60267aeb8f758c21ca8b0577751fea
MD5 9ba0e02a7187bbab50546fb7ee6061f1
SHA1 0ec88612c2602b11a0ac69a10be46a8a2f9a46d2
SHA512 d86613e203783bb947a8db406d88c458b36c438fa22339529aec6d265250106a7b289ba4e22eb3d4f2b69d28a691759f418fc5dcc98ef8536765f1bad45915ad
SSDEEP 196608:VnT3AEqkoxDLJeHEOuqQ9mPl12EZ7NYYVLKrzYmk:lUhd1OK4vFNhVkz2
TLSH
T1DE67D916B67954D9D17BC07882838E22692074DE0B353BF779DC827A2F28EF9693C354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21616128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

integration-99413aeba6a239db.pdb

kernel32

SetFileCompletionNotificationModes PostQueuedCompletionStatus GetConsoleScreenBufferInfo GetStdHandle SetConsoleTextAttribute GetQueuedCompletionStatusEx CloseHandle GetOverlappedResult ReadFile SetHandleInformation CreateIoCompletionPort GetSystemTimeAsFileTime InitializeSListHead GetModuleHandleA WaitForMultipleObjects FormatMessageW GetModuleHandleW GetFileType GetFileAttributesW GetConsoleOutputCP GetConsoleMode WriteConsoleW MultiByteToWideChar GetModuleFileNameW HeapAlloc GetFinalPathNameByHandleW ReleaseMutex CreateMutexA LoadLibraryA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess SetUnhandledExceptionFilter FindClose FindFirstFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetEnvironmentStringsW GetExitCodeProcess CreateProcessW GetProcAddress RtlVirtualUnwind CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId MoveFileExW SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

advapi32

GetUserNameW SystemFunction036

shell32

SHGetKnownFolderPath

combase

CoTaskMemFree

ws2_32

shutdown send recv bind WSAIoctl connect ioctlsocket WSAGetLastError setsockopt getsockopt closesocket WSASocketW WSAStartup WSACleanup freeaddrinfo getaddrinfo

ntdll

NtCancelIoFileEx NtReadFile NtDeviceIoControlFile NtWriteFile NtOpenFile RtlNtStatusToDosError NtCreateFile NtCreateNamedPipeFile

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

userenv

GetUserProfileDirectoryW

vcruntime140

memcpy __CxxFrameHandler3 _CxxThrowException memcmp __current_exception_context __C_specific_handler __current_exception memset memmove

api-ms-win-crt-math-l1-1-0

floor fmod log __setusermatherr cos exp sin tan round log10 trunc pow ceil atan asin acos

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _get_initial_narrow_environment _initterm _c_exit _cexit _crt_atexit exit _initterm_e terminate __p___argv __p___argc _exit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_9ba0e02a7187bbab50546fb7ee6061f1_akira_cobalt-strike_glassworm_rusty-stealer_satacom

kernel32

api-ms-win-core-synch-l1-2-0

advapi32

shell32

combase

ws2_32

ntdll

bcryptprimitives

bcrypt

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic