General
- Target 2026-08-11_9a91c94fb0b9bc56f7298dd5fd68f930_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 7.4MB
- Sample260811-c66dpstfkb
- SHA256 d395667d29a517b5284f522ed9b74cb48709ba8eaa90d9a600d75c47d632475a
- MD5 9a91c94fb0b9bc56f7298dd5fd68f930
- SHA1 29f810ff68e2fd0de038e101a304322c5c658b75
- SHA512 f7ab8db2b5ca0d402bbe83e3a1178da8d001528e46c3c367573031c637cd98248672730656f1be336d49e1ec010e548af5d6242c4e1f422808b4188d3c0cab29
- SSDEEP 98304:q0mY0rGsaMz8lXXRbkyZNW481bu5L3K+XJgYQ:94DzglXXtTWCJ
- TLSH T1FD765A12BA6A59ACD15BC07483464673AA7130DB0B35B9FF44C496393F6AEF11F3C268
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-11_9a91c94fb0b9bc56f7298dd5fd68f930_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_9a91c94fb0b9bc56f7298dd5fd68f930_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_9a91c94fb0b9bc56f7298dd5fd68f930_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 7.4MB
- SHA256 d395667d29a517b5284f522ed9b74cb48709ba8eaa90d9a600d75c47d632475a
- MD5 9a91c94fb0b9bc56f7298dd5fd68f930
- SHA1 29f810ff68e2fd0de038e101a304322c5c658b75
- SHA512 f7ab8db2b5ca0d402bbe83e3a1178da8d001528e46c3c367573031c637cd98248672730656f1be336d49e1ec010e548af5d6242c4e1f422808b4188d3c0cab29
- SSDEEP 98304:q0mY0rGsaMz8lXXRbkyZNW481bu5L3K+XJgYQ:94DzglXXtTWCJ
- TLSH T1FD765A12BA6A59ACD15BC07483464673AA7130DB0B35B9FF44C496393F6AEF11F3C268
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.