2026-08-10_7feb6111438900e4cbaa690f6f056d5b_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_7feb6111438900e4cbaa690f6f056d5b_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 12.0MB
Sample260810-marksafk8v
SHA256 5b1044b63801916cc026048cb35dcb69521796fc333d0836f501020dffea57c3
MD5 7feb6111438900e4cbaa690f6f056d5b
SHA1 3f08afa07f57df18e39a86ba6510ec1df15a2192
SHA512 ed4f2052d02dcad53fc0802f007c8c027c7558f77f5bae10dc544222da0d91b24486419ea0b9511bcf6d5fc130ff2f42be6df3fc248ff86b31681c21eb33801e
SSDEEP 196608:9urHjnssuhHToAUPNfGU5vXvxC1Av9YrH2F4nlNOEdLdGFiu4+LW6x2B4Yl0Ia0T:9u3sNhHTodRGkXfYSKnlsgZGFna2IaQ
TLSH
T196C63313F3D81AE8F06BE17883A11613773AB8C94733F1DF12E549A93E6A5F11B26245
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_7feb6111438900e4cbaa690f6f056d5b_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-08-10_7feb6111438900e4cbaa690f6f056d5b_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 12.0MB

2026-08-10_7feb6111438900e4cbaa690f6f056d5b_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH a2c795e8ce9f8473eb10f0101bf1b42a
SHA256 5b1044b63801916cc026048cb35dcb69521796fc333d0836f501020dffea57c3
MD5 7feb6111438900e4cbaa690f6f056d5b
SHA1 3f08afa07f57df18e39a86ba6510ec1df15a2192
SHA512 ed4f2052d02dcad53fc0802f007c8c027c7558f77f5bae10dc544222da0d91b24486419ea0b9511bcf6d5fc130ff2f42be6df3fc248ff86b31681c21eb33801e
SSDEEP 196608:9urHjnssuhHToAUPNfGU5vXvxC1Av9YrH2F4nlNOEdLdGFiu4+LW6x2B4Yl0Ia0T:9u3sNhHTodRGkXfYSKnlsgZGFna2IaQ
TLSH
T196C63313F3D81AE8F06BE17883A11613773AB8C94733F1DF12E549A93E6A5F11B26245
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

336384

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dropp.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

kernel32

QueryPerformanceCounter GetModuleHandleA GetFullPathNameW CreateFileW SetFileTime FindFirstFileExW FindClose GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW GetModuleFileNameW GetTempPathW CreateWaitableTimerExW SetWaitableTimer Sleep GetModuleHandleW GetEnvironmentVariableW LoadLibraryExA HeapAlloc WriteConsoleW MultiByteToWideChar GetConsoleOutputCP GetConsoleMode GetStdHandle RtlVirtualUnwind WideCharToMultiByte ReleaseMutex CreateMutexA lstrlenW GetProcAddress LoadLibraryA WaitForSingleObjectEx RtlLookupFunctionEntry RtlCaptureContext GetCurrentDirectoryW GetCurrentThreadId HeapReAlloc HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler CreateProcessW GetLocalTime GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetCurrentProcessId SetLastError GetCurrentProcess GetCommandLineW GetExitCodeProcess WaitForSingleObject CloseHandle SetFileInformationByHandle GetLastError DeleteFileW QueryPerformanceFrequency FormatMessageW

advapi32

RegSetValueExW RegCloseKey GetTokenInformation RegOpenKeyExW OpenProcessToken

user32

FindWindowW ShowWindow PostMessageW GetWindowTextW GetTopWindow GetClassNameW SendMessageW FindWindowExW GetWindow

ntdll

NtWriteFile RtlNtStatusToDosError

oleaut32

SysFreeString SysStringLen

vcruntime140

memcmp memcpy __C_specific_handler memmove __current_exception_context __CxxFrameHandler3 memset __current_exception

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-heap-l1-1-0

free malloc _set_new_mode

api-ms-win-crt-utility-l1-1-0

_rotl64

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _register_onexit_function _set_app_type _seh_filter_exe terminate _initialize_onexit_table _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _get_initial_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_7feb6111438900e4cbaa690f6f056d5b_akira_cobalt-strike_glassworm_rusty-stealer_satacom

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

advapi32

user32

ntdll

oleaut32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic