2026-08-15_9a0fea5a8374b7c3a47eef283fe8c302_akira_cobalt-strike_glassworm_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_9a0fea5a8374b7c3a47eef283fe8c302_akira_cobalt-strike_glassworm_satacom_vidar
Size 2.8MB
Sample260815-bpcvdswzf1
SHA256 f560424f13688e581ad9a131c821ae71b8d3b4c2bee643ea2fe24b189a38a604
MD5 9a0fea5a8374b7c3a47eef283fe8c302
SHA1 e17aa1d7f26209003e1a345e00c0a87ed9521dba
SHA512 08d46b8125eeb9f1c04a72edf2fc9bb3fd81c103b1e5ae56c246a468777dcf8a3656ec064f0a021d73249cf706efb1947c35bf7dbb0b37a982ca8577c0b959b1
SSDEEP 49152:jP4sWebFDuX3gaY3eEl95IphT62f86PMLtC8S67nfWC1Ht/yUn8WMHG:pca5oV62f86PMdxhwp
TLSH
T1A6D55B167A9B68ADC16AC47483468AA35A2130CB0F35AEFF41D486743F6ABF11F3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_9a0fea5a8374b7c3a47eef283fe8c302_akira_cobalt-strike_glassworm_satacom_vidar

File Explorer

2026-08-15_9a0fea5a8374b7c3a47eef283fe8c302_akira_cobalt-strike_glassworm_satacom_vidar

.exe 2.8MB

2026-08-15_9a0fea5a8374b7c3a47eef283fe8c302_akira_cobalt-strike_glassworm_satacom_vidar

IMPHASH 56f3f0e9d64442db9d6534eaf51163f1
SHA256 f560424f13688e581ad9a131c821ae71b8d3b4c2bee643ea2fe24b189a38a604
MD5 9a0fea5a8374b7c3a47eef283fe8c302
SHA1 e17aa1d7f26209003e1a345e00c0a87ed9521dba
SHA512 08d46b8125eeb9f1c04a72edf2fc9bb3fd81c103b1e5ae56c246a468777dcf8a3656ec064f0a021d73249cf706efb1947c35bf7dbb0b37a982ca8577c0b959b1
SSDEEP 49152:jP4sWebFDuX3gaY3eEl95IphT62f86PMLtC8S67nfWC1Ht/yUn8WMHG:pca5oV62f86PMdxhwp
TLSH
T1A6D55B167A9B68ADC16AC47483468AA35A2130CB0F35AEFF41D486743F6ABF11F3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2171796

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetModuleHandleA GetProcAddress GetCurrentThread TryAcquireSRWLockExclusive GetStdHandle GetConsoleMode WaitForSingleObject GlobalMemoryStatusEx CreateThread RtlVirtualUnwind GlobalLock GlobalAlloc CreateNamedPipeW DeviceIoControl GetTickCount64 GetVolumeInformationW GetDriveTypeW GetCurrentProcess ReleaseMutex WriteConsoleW SetLastError GetFileInformationByHandleEx GetModuleHandleW FormatMessageW GetCurrentDirectoryW MultiByteToWideChar Sleep ReadProcessMemory WakeAllConditionVariable GetProcessIoCounters InitializeCriticalSection WaitForSingleObjectEx GetSystemTimes GetLocaleInfoA TerminateProcess GetProcessTimes MulDiv ReadFileEx LocalFree ReleaseSRWLockShared AcquireSRWLockShared RtlCaptureContext GetSystemTimeAsFileTime WakeConditionVariable QueryPerformanceCounter ExitProcess OpenProcess LoadLibraryA GetCurrentProcessId GetCommandLineW SleepEx WriteFileEx GetACP WideCharToMultiByte GetFullPathNameW VirtualQueryEx GetComputerNameA LoadLibraryW GetCurrentThreadId CreateMutexA EnterCriticalSection SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent FindFirstFileW FindNextFileW FindClose InitializeSListHead GetSystemInfo GlobalUnlock GlobalFree IsDebuggerPresent SetThreadStackGuarantee AddVectoredExceptionHandler GetLastError CreateMutexW HeapReAlloc SwitchToThread ReleaseSRWLockExclusive CloseHandle DeleteProcThreadAttributeList GetLogicalDrives UpdateProcThreadAttribute InitializeProcThreadAttributeList DuplicateHandle GetFileAttributesW CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetModuleFileNameW CompareStringOrdinal FreeEnvironmentStringsW QueryPerformanceFrequency AcquireSRWLockExclusive HeapFree HeapAlloc GetDiskFreeSpaceExW GetEnvironmentVariableW RtlLookupFunctionEntry GetFileInformationByHandle LeaveCriticalSection CreateFileW GetEnvironmentStringsW GetProcessHeap

user32

GetWindowLongA MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRectEx GetWindowRect GetClientRect ValidateRgn InvalidateRect GetUpdateRgn ReleaseDC GetDC GetSystemMetrics MsgWaitForMultipleObjects ReleaseCapture GetForegroundWindow GetAsyncKeyState GetKeyState SetFocus IsClipboardFormatAvailable GetClipboardData ChangeClipboardChain SetClipboardViewer GetClipboardOwner BringWindowToTop IsIconic GetWindowPlacement SetWindowPos OpenIcon DestroyWindow LoadCursorA CreateWindowExW CreateWindowExA RegisterClassExW DefWindowProcW SendMessageA PeekMessageW PeekMessageA DispatchMessageW TranslateMessage RegisterWindowMessageW GetKeyboardLayout SetWindowLongPtrA GetWindowLongPtrA SetLayeredWindowAttributes SetWindowRgn SetWindowTextW SetRect SetWindowLongA GetParent GetWindow SetActiveWindow MessageBeep GetSysColor LoadIconA DestroyIcon CreateIconIndirect WindowFromPoint PostThreadMessageA MessageBoxA SystemParametersInfoA ShowWindow FillRect GetKeyboardState RegisterHotKey CloseClipboard IsWindow GetMessageW ExitWindowsEx LockWorkStation PostMessageA SetForegroundWindow SetClipboardData EmptyClipboard OpenClipboard SetCapture

bcrypt

BCryptGenRandom

ole32

DoDragDrop RevokeDragDrop OleInitialize CoUninitialize ReleaseStgMedium CoInitializeEx CoInitializeSecurity CoCreateInstance CoSetProxyBlanket RegisterDragDrop

powrprof

SetSuspendState CallNtPowerInformation

ntdll

NtWriteFile NtReadFile NtQueryInformationProcess RtlNtStatusToDosError RtlGetVersion NtQuerySystemInformation

advapi32

GetLengthSid IsValidSid CopySid SystemFunction036 LookupPrivilegeValueW LookupAccountSidW GetTokenInformation OpenProcessToken AdjustTokenPrivileges

shell32

DragQueryFileW ShellExecuteA SHGetFolderPathW CommandLineToArgvW

pdh

PdhRemoveCounter PdhCloseQuery PdhOpenQueryA PdhGetFormattedCounterValue PdhCollectQueryData PdhAddEnglishCounterW

iphlpapi

GetIfTable2 GetIfEntry2 GetAdaptersAddresses FreeMibTable

netapi32

NetUserGetInfo NetUserGetLocalGroups NetUserEnum NetApiBufferFree

secur32

LsaGetLogonSessionData LsaFreeReturnBuffer LsaEnumerateLogonSessions

oleaut32

SysAllocString SysFreeString VariantClear

gdi32

SelectObject SaveDC RestoreDC SetBkMode CombineRgn CreateRectRgn CreateDIBSection SetDIBits PlayEnhMetaFile Polyline PolyPolygon GetEnhMetaFileHeader DeleteObject Pie GetDeviceCaps BitBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC ExtCreateRegion GetRegionData GetWindowOrgEx SelectPalette SetPixel CreatePolygonRgn LPtoDP SetWindowOrgEx Arc CreateFontW EnumFontFamiliesW GetGlyphOutlineW GetTextExtentPoint32W GetCharacterPlacementW SetTextColor GetTextMetricsA TextOutW DPtoLP OffsetRgn GetDCOrgEx GetRgnBox Polygon UpdateColors MoveToEx SelectClipRgn RectInRegion LineTo EqualRgn GetDIBits GetObjectA GdiFlush CreateBitmap CreatePalette CreatePen CreateSolidBrush GetStockObject RealizePalette ExtCreatePen SetTextAlign SetDIBitsToDevice SetStretchBltMode StretchDIBits StretchBlt

ws2_32

select __WSAFDIsSet

comctl32

_TrackMouseEvent

psapi

GetModuleFileNameExW GetPerformanceInfo

gdiplus

GdipSetPenDashArray GdipSetPenDashStyle GdipGetPenWidth GdipSetPenWidth GdipFillPieI GdipDrawArcI GdipAddPathPolygonI GdipFillPath GdipDrawPath GdipDrawLineI GdipScaleWorldTransform GdipSetSmoothingMode GdipDeleteGraphics GdipCreateFromHDC GdipSetPenColor GdipSetSolidFillColor GdipAddPathLine2I GdipAddPathLineI GdipAddPathLine2 GdipClosePathFigure GdipDeletePath GdipCreatePath GdiplusStartup GdipSetPenLineJoin GdipSetPenEndCap GdipSetPenStartCap GdipDeletePen GdipCreatePen1 GdipCreateSolidFill GdipDeleteBrush GdiplusShutdown GdipFree GdipAlloc GdipCloneBrush

vcruntime140

memmove memcpy memcmp memset _CxxThrowException __current_exception_context __current_exception __intrinsic_setjmp __C_specific_handler strrchr longjmp strstr strchr _purecall __CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

pow floor atan2 atan asin acos tan sin log cos round trunc ceil lround roundf acosf atan2f ceilf cosf floorf fmodf sinf sqrt sqrtf tanf __setusermatherr

api-ms-win-crt-string-l1-1-0

strncpy isalnum islower isdigit strcmp strcspn wcslen strlen _strdup isspace isxdigit isalpha isupper toupper _strnicmp strncmp tolower

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc calloc realloc free

api-ms-win-crt-time-l1-1-0

_ftime64 _time64

api-ms-win-crt-stdio-l1-1-0

fopen fflush __acrt_iob_func fclose fgets _set_fmode ftell getc __stdio_common_vsscanf fseek fputc fread __stdio_common_vfscanf __stdio_common_vsprintf __p__commode fwrite _wfopen __stdio_common_vfprintf _wsopen_dispatch _close feof ferror _write _wopen _lseeki64 _read _open

api-ms-win-crt-runtime-l1-1-0

abort strerror _wsystem raise _errno _seh_filter_exe _set_app_type exit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e terminate _crt_atexit _register_onexit_function _initialize_onexit_table _exit __p___argc __p___argv _register_thread_local_exe_atexit_callback _c_exit _cexit

api-ms-win-crt-convert-l1-1-0

atoi mbstowcs _strtoi64 atol wcstombs strtol

api-ms-win-crt-utility-l1-1-0

rand bsearch qsort

api-ms-win-crt-locale-l1-1-0

localeconv _configthreadlocale _create_locale setlocale

api-ms-win-crt-filesystem-l1-1-0

_wchmod _wunlink _wrename _waccess _wrmdir _wchdir _wstat64i32 _wmkdir _stat64i32

api-ms-win-crt-environment-l1-1-0

_wgetcwd _wputenv _wgetenv getenv

api-ms-win-crt-process-l1-1-0

_wexecvp

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_9a0fea5a8374b7c3a47eef283fe8c302_akira_cobalt-strike_glassworm_satacom_vidar

kernel32

user32

bcrypt

ole32

powrprof

ntdll

advapi32

shell32

pdh

iphlpapi

netapi32

secur32

oleaut32

gdi32

ws2_32

comctl32

psapi

gdiplus

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-process-l1-1-0

generic