2026-08-10_77f41a598a6086837499f2a42d2b7144_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_77f41a598a6086837499f2a42d2b7144_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 30.2MB
Sample260810-mczzyawfrf
SHA256 961e0af5c6a212e138a09603b8c4655cbfae50ec9467dde2168f7cfccab31631
MD5 77f41a598a6086837499f2a42d2b7144
SHA1 22dff2a0325f7f5d0eea108036f44f1d08861f48
SHA512 e4bf304fda25f99c4085c39b757aff3f1ec87cbb664b6a86dfc39045b0bc59a583e316b5ad01923f18bc98b592d06798d2afc486b7a2de02d5f7bb2cd8f97ad3
SSDEEP 196608:+6nz2AHxBzSehSugL1g612j0x+1yH5/Hb2mhxg:HnzB/AuNLF1yH5fbB+
TLSH
T18467D926B67954D9D17BC07882838E22692074DE0B353BF775DC827A2F28EF9693C354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_77f41a598a6086837499f2a42d2b7144_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-08-10_77f41a598a6086837499f2a42d2b7144_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 30.2MB

2026-08-10_77f41a598a6086837499f2a42d2b7144_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 5c29017067a4f4a9383848c9652e421b
SHA256 961e0af5c6a212e138a09603b8c4655cbfae50ec9467dde2168f7cfccab31631
MD5 77f41a598a6086837499f2a42d2b7144
SHA1 22dff2a0325f7f5d0eea108036f44f1d08861f48
SHA512 e4bf304fda25f99c4085c39b757aff3f1ec87cbb664b6a86dfc39045b0bc59a583e316b5ad01923f18bc98b592d06798d2afc486b7a2de02d5f7bb2cd8f97ad3
SSDEEP 196608:+6nz2AHxBzSehSugL1g612j0x+1yH5/Hb2mhxg:HnzB/AuNLF1yH5fbB+
TLSH
T18467D926B67954D9D17BC07882838E22692074DE0B353BF775DC827A2F28EF9693C354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21613952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

integration-99413aeba6a239db.pdb

kernel32

SetFileCompletionNotificationModes PostQueuedCompletionStatus GetConsoleScreenBufferInfo GetStdHandle SetConsoleTextAttribute GetQueuedCompletionStatusEx CloseHandle GetOverlappedResult ReadFile SetHandleInformation CreateIoCompletionPort GetSystemTimeAsFileTime InitializeSListHead GetModuleHandleA WaitForMultipleObjects FormatMessageW GetModuleHandleW GetFileType GetFileAttributesW GetConsoleOutputCP GetConsoleMode WriteConsoleW MultiByteToWideChar GetModuleFileNameW HeapAlloc GetFinalPathNameByHandleW ReleaseMutex CreateMutexA LoadLibraryA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess SetUnhandledExceptionFilter FindClose FindFirstFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetEnvironmentStringsW GetExitCodeProcess CreateProcessW GetProcAddress RtlVirtualUnwind CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId MoveFileExW SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

advapi32

GetUserNameW SystemFunction036

shell32

SHGetKnownFolderPath

combase

CoTaskMemFree

ws2_32

shutdown send recv bind WSAIoctl connect ioctlsocket WSAGetLastError setsockopt getsockopt closesocket WSASocketW WSAStartup WSACleanup freeaddrinfo getaddrinfo

ntdll

NtCancelIoFileEx NtReadFile NtDeviceIoControlFile NtWriteFile NtOpenFile RtlNtStatusToDosError NtCreateFile NtCreateNamedPipeFile

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

userenv

GetUserProfileDirectoryW

vcruntime140

memcpy __CxxFrameHandler3 _CxxThrowException memcmp __current_exception_context __C_specific_handler __current_exception memset memmove

api-ms-win-crt-math-l1-1-0

floor fmod log __setusermatherr cos exp sin tan round log10 trunc pow ceil atan asin acos

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _get_initial_narrow_environment _initterm _c_exit _cexit _crt_atexit exit _initterm_e terminate __p___argv __p___argc _exit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_77f41a598a6086837499f2a42d2b7144_akira_cobalt-strike_glassworm_rusty-stealer_satacom

kernel32

api-ms-win-core-synch-l1-2-0

advapi32

shell32

combase

ws2_32

ntdll

bcryptprimitives

bcrypt

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic