General
- Target 2026-08-15_05dfd43c6bf3255d9b554b5ea17a1e45_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 8.2MB
- Sample260815-ce5m4axwf1
- SHA256 883643e25fcb1190284f0b172eb6eb7f2f109f85def6a74ebad097910aba74bc
- MD5 05dfd43c6bf3255d9b554b5ea17a1e45
- SHA1 30eabbf1a0b64fddfb188851866a49b43b633dbd
- SHA512 77eb96af0fb76ae606321a1a36abff8bf89dee8d7473c3049197ff62157aa0f3046d7393f506ed7d28d3481caf2169d1592560c50f28fae7398acce53facbd2d
- SSDEEP 98304:qRRs/f1d82gf0aR9jf1RgbXSCwt7bM+XC7CLMBi2:ZZgBTo+XeCLE
- TLSH T159865C03F562D1E8C4AEC075835AE273FB32BC9D452472BA6BA42B212F25F506F1D749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_05dfd43c6bf3255d9b554b5ea17a1e45_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_05dfd43c6bf3255d9b554b5ea17a1e45_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_05dfd43c6bf3255d9b554b5ea17a1e45_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 8.2MB
- SHA256 883643e25fcb1190284f0b172eb6eb7f2f109f85def6a74ebad097910aba74bc
- MD5 05dfd43c6bf3255d9b554b5ea17a1e45
- SHA1 30eabbf1a0b64fddfb188851866a49b43b633dbd
- SHA512 77eb96af0fb76ae606321a1a36abff8bf89dee8d7473c3049197ff62157aa0f3046d7393f506ed7d28d3481caf2169d1592560c50f28fae7398acce53facbd2d
- SSDEEP 98304:qRRs/f1d82gf0aR9jf1RgbXSCwt7bM+XC7CLMBi2:ZZgBTo+XeCLE
- TLSH T159865C03F562D1E8C4AEC075835AE273FB32BC9D452472BA6BA42B212F25F506F1D749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.