General
- Target 2026-08-16_cd131ae803d29b23bf5017edb5e83a52_akira_cobalt-strike_glassworm_satacom
- Size 1017KB
- Sample260816-vbwj5aen7x
- SHA256 42ce0f80451df7be1fab088e4617d69de25ea6fbd72a0d905970497c188f911d
- MD5 cd131ae803d29b23bf5017edb5e83a52
- SHA1 ab14a6c86d9a1d1f9ab290b6a21ce8169df13268
- SHA512 52cace9b7c30d055de6adfccfab48e1b2420ed5ee41bc63562c015335864568ca41002223c489146229742532c7dfc980ef8dc750373f068bb85283998f612ed
- SSDEEP 24576:AKg1b1fHI2zpepIOogEsyGVkxdDe2QffannK:AK2b1nnRTDe2Qffann
- TLSH T177252947F6A250BCC06AC0B493166533BA31B8894B257EFB4BD0AB313E55BD06B3DB45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_cd131ae803d29b23bf5017edb5e83a52_akira_cobalt-strike_glassworm_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_cd131ae803d29b23bf5017edb5e83a52_akira_cobalt-strike_glassworm_satacom.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_cd131ae803d29b23bf5017edb5e83a52_akira_cobalt-strike_glassworm_satacom
- Size 1017KB
- SHA256 42ce0f80451df7be1fab088e4617d69de25ea6fbd72a0d905970497c188f911d
- MD5 cd131ae803d29b23bf5017edb5e83a52
- SHA1 ab14a6c86d9a1d1f9ab290b6a21ce8169df13268
- SHA512 52cace9b7c30d055de6adfccfab48e1b2420ed5ee41bc63562c015335864568ca41002223c489146229742532c7dfc980ef8dc750373f068bb85283998f612ed
- SSDEEP 24576:AKg1b1fHI2zpepIOogEsyGVkxdDe2QffannK:AK2b1nnRTDe2Qffann
- TLSH T177252947F6A250BCC06AC0B493166533BA31B8894B257EFB4BD0AB313E55BD06B3DB45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (3883) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.