General
- Target 2026-08-15_319fa40e16497209ebc9e9b8fe5c9737_akira_cobalt-strike_rusty-stealer_satacom
- Size 3.6MB
- Sample260815-b22z2sdb92
- SHA256 f9a7476483b4aa40f4687cf4fb117714200bfae80e2e452750849eb9fe49f7e7
- MD5 319fa40e16497209ebc9e9b8fe5c9737
- SHA1 bbe2b29c5678d68a465626b86be1395f09dfd12d
- SHA512 b03f6a7299b3fc1fc2de5813f396a81ee1c1b85ac084ad1d3cf617826ec8342fa4bdf1987cb43bc3c4d1f2099bc02b5021af7beb048ed4719062e17c5637b43d
- SSDEEP 49152:TaDcmAdRzSMk27CI4QXi+GhGz539H6Pt9bbKJelrm0cWw:Tacnp7CI9y+rgbpw
- TLSH T17306AE43F363D2ECC116C0784715B233EA63F8490735A6FB67C85A347A92BD05E29B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-15_319fa40e16497209ebc9e9b8fe5c9737_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_319fa40e16497209ebc9e9b8fe5c9737_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_319fa40e16497209ebc9e9b8fe5c9737_akira_cobalt-strike_rusty-stealer_satacom
- Size 3.6MB
- SHA256 f9a7476483b4aa40f4687cf4fb117714200bfae80e2e452750849eb9fe49f7e7
- MD5 319fa40e16497209ebc9e9b8fe5c9737
- SHA1 bbe2b29c5678d68a465626b86be1395f09dfd12d
- SHA512 b03f6a7299b3fc1fc2de5813f396a81ee1c1b85ac084ad1d3cf617826ec8342fa4bdf1987cb43bc3c4d1f2099bc02b5021af7beb048ed4719062e17c5637b43d
- SSDEEP 49152:TaDcmAdRzSMk27CI4QXi+GhGz539H6Pt9bbKJelrm0cWw:Tacnp7CI9y+rgbpw
- TLSH T17306AE43F363D2ECC116C0784715B233EA63F8490735A6FB67C85A347A92BD05E29B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.