General
- Target 2026-08-15_af3edd6c196e9c9cd08044fdb68ea72a_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom
- Size 12.5MB
- Sample260815-2b72gsvbma
- SHA256 ca602f7b80de3d4a530eb097d6ac725b078fddc5d83e827dd4810acc710f4ae2
- MD5 af3edd6c196e9c9cd08044fdb68ea72a
- SHA1 1bc2abdf8976c87168375f8c77402f3c44f2745a
- SHA512 59a02df23e4f2503b791fb0c689271072c3188a772e6aea54ce238051e42e7dab571130e8710c8830b70f71a237dd3db212203ae6f36e475ebbc45cbbd89a3da
- SSDEEP 98304:6F7Drmm4Jxa2HM5KLvmITs/E+MyP022lWOOTWTbpEbTrd+VE3iQNLCb8DTo+uZwi:60mWRFlu8Io+cwmJ3YqQST
- TLSH T18ED65B43F26291E8C12AC07483566233FA72BC49433576EB7BDC7A312F75F906A29B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_af3edd6c196e9c9cd08044fdb68ea72a_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_af3edd6c196e9c9cd08044fdb68ea72a_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_af3edd6c196e9c9cd08044fdb68ea72a_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom
- Size 12.5MB
- SHA256 ca602f7b80de3d4a530eb097d6ac725b078fddc5d83e827dd4810acc710f4ae2
- MD5 af3edd6c196e9c9cd08044fdb68ea72a
- SHA1 1bc2abdf8976c87168375f8c77402f3c44f2745a
- SHA512 59a02df23e4f2503b791fb0c689271072c3188a772e6aea54ce238051e42e7dab571130e8710c8830b70f71a237dd3db212203ae6f36e475ebbc45cbbd89a3da
- SSDEEP 98304:6F7Drmm4Jxa2HM5KLvmITs/E+MyP022lWOOTWTbpEbTrd+VE3iQNLCb8DTo+uZwi:60mWRFlu8Io+cwmJ3YqQST
- TLSH T18ED65B43F26291E8C12AC07483566233FA72BC49433576EB7BDC7A312F75F906A29B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
Checks whether UAC is enabled