2026-08-11_da73427a32c52689d11f72f4b2dc4f4e_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-11_da73427a32c52689d11f72f4b2dc4f4e_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 5.1MB
Sample260811-cppdvsyyez
SHA256 fa8aec68c7ea3ece200ccce5df99e2a4ef3e8b19b5493ef1274b031a6bce63b9
MD5 da73427a32c52689d11f72f4b2dc4f4e
SHA1 1f5208e209700282b2007f27e4f9de9841bd5329
SHA512 50389b76eab51fbf195e3f9d371b405b45294756c682d0fad6859bbe719ae1e1b42215749b67c0ee3368176a18df20016f22399b0c260e77597c6517547662f8
SSDEEP 49152:ZxSD56vPQgTDUj6jRfhshr/vJbkmsmw7iU5Q4zaPuKnm2VJD+R47Um/czJcjV2MK:ZEArfZmsJYugORmB2MmhWE+
TLSH
T1B5364B11BA4669ECC16AC47083474A721A3174CB0B36BAFF50D892753FAAAF41F3D758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-11_da73427a32c52689d11f72f4b2dc4f4e_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-08-11_da73427a32c52689d11f72f4b2dc4f4e_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 5.1MB

2026-08-11_da73427a32c52689d11f72f4b2dc4f4e_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 38a560a2633648308576168e8a4b4fb3
SHA256 fa8aec68c7ea3ece200ccce5df99e2a4ef3e8b19b5493ef1274b031a6bce63b9
MD5 da73427a32c52689d11f72f4b2dc4f4e
SHA1 1f5208e209700282b2007f27e4f9de9841bd5329
SHA512 50389b76eab51fbf195e3f9d371b405b45294756c682d0fad6859bbe719ae1e1b42215749b67c0ee3368176a18df20016f22399b0c260e77597c6517547662f8
SSDEEP 49152:ZxSD56vPQgTDUj6jRfhshr/vJbkmsmw7iU5Q4zaPuKnm2VJD+R47Um/czJcjV2MK:ZEArfZmsJYugORmB2MmhWE+
TLSH
T1B5364B11BA4669ECC16AC47083474A721A3174CB0B36BAFF50D892753FAAAF41F3D758
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3107504

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

unxml.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

kernel32

CreateThread GetCurrentProcessId QueryPerformanceCounter ReadFileEx ReadFile GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind QueryPerformanceFrequency HeapReAlloc CancelIo GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess HeapFree GetEnvironmentStringsW GetProcessHeap SetFileTime GetStdHandle CreateFileW CreateDirectoryW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW SetFileInformationByHandle lstrlenW FindFirstFileExW FindClose ExitProcess WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex GetFinalPathNameByHandleW GetCurrentThreadId DeleteFileW HeapAlloc GetModuleFileNameW ReadConsoleW MultiByteToWideChar WriteConsoleW GetConsoleOutputCP GetFileAttributesW GetFileType GetModuleHandleW FormatMessageW GetFullPathNameW SetLastError WaitForMultipleObjects GetTempPathW SleepEx FindNextFileW WriteFileEx GetSystemTimeAsFileTime WaitForSingleObject InitializeSListHead SetUnhandledExceptionFilter FreeEnvironmentStringsW GetLastError CompareStringOrdinal SetConsoleTextAttribute SetConsoleMode GetConsoleMode GetConsoleScreenBufferInfo GetFileInformationByHandle GetProcAddress GetModuleHandleA Sleep CloseHandle CreateEventW

ntdll

RtlNtStatusToDosError NtReadFile NtCreateNamedPipeFile NtWriteFile NtOpenFile

vcruntime140

__C_specific_handler __CxxFrameHandler3 memmove memset _CxxThrowException __current_exception memcmp __current_exception_context memcpy

api-ms-win-crt-math-l1-1-0

pow __setusermatherr ldexp

api-ms-win-crt-runtime-l1-1-0

_initterm _initialize_narrow_environment _configure_narrow_argv _initterm_e exit _exit _register_onexit_function __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _seh_filter_exe _initialize_onexit_table _get_initial_narrow_environment _set_app_type terminate

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-11_da73427a32c52689d11f72f4b2dc4f4e_akira_cobalt-strike_glassworm_rusty-stealer_satacom

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic