General
- Target 2026-08-12_0c0a51f7a57295c7e1251fc43ba4b7ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 14.5MB
- Sample260813-cbazbazbnc
- SHA256 5ed45302540dda4cce4c43936f160569d4a54b3a666175fd8fd2ccf3b63459eb
- MD5 0c0a51f7a57295c7e1251fc43ba4b7ce
- SHA1 8a7431520032544b1717d0f6908081bd8423fd09
- SHA512 834f59d48f74507a8e7b6699b6ba560a59b69bab5aa0dac237fab8c48d2881289e03ae39b33f0d1ce2fc16a4d4772f41be4df8ed476b0e2b7ff380ecf4eff17e
- SSDEEP 196608:EqqeVkBP4D6xMX9X7jBTwdnAxF4JJ2JTDEwKBFnzT:zV+4TXVZ+nAfCUCn
- TLSH T119E69D07F35181E9C0ADC0B9835AA637EA32B8894735B2DF5BE40B112E16FD06B3D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-12_0c0a51f7a57295c7e1251fc43ba4b7ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_0c0a51f7a57295c7e1251fc43ba4b7ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_0c0a51f7a57295c7e1251fc43ba4b7ce_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 14.5MB
- SHA256 5ed45302540dda4cce4c43936f160569d4a54b3a666175fd8fd2ccf3b63459eb
- MD5 0c0a51f7a57295c7e1251fc43ba4b7ce
- SHA1 8a7431520032544b1717d0f6908081bd8423fd09
- SHA512 834f59d48f74507a8e7b6699b6ba560a59b69bab5aa0dac237fab8c48d2881289e03ae39b33f0d1ce2fc16a4d4772f41be4df8ed476b0e2b7ff380ecf4eff17e
- SSDEEP 196608:EqqeVkBP4D6xMX9X7jBTwdnAxF4JJ2JTDEwKBFnzT:zV+4TXVZ+nAfCUCn
- TLSH T119E69D07F35181E9C0ADC0B9835AA637EA32B8894735B2DF5BE40B112E16FD06B3D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Detects executables containing URLs to raw contents of a Github gist
-
Checks whether UAC is enabled
-
Suspicious use of SetThreadContext