General
- Target 2026-08-17_d40f7a275c4c86ec1c593ac46531cbc0_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 4.8MB
- Sample260817-3v5adasbjc
- SHA256 be91e3bca20ef71a8f96616c325e2afa92775fd8ccfc3ea7d73079697c75381c
- MD5 d40f7a275c4c86ec1c593ac46531cbc0
- SHA1 259303ddda6099f635500f9b9c33654530d5c436
- SHA512 7eb606b59af205cdb48b977e46b9a427035c78158dea4de3b18ef31e623206a4f3d928c9e3741b91c184833aaad2e72f5d99d755846d29b1106fb9a22f140994
- SSDEEP 49152:08IIGo6ZIGFRi4DzpdLdN3jDk6BnASRDVKbxlEfWxepVOlWmn1bqX/X+HhS8KEXT:08PsWoTH5Vw+nX0cEWEXwu
- TLSH T117366C02BE9649E9D09AC874C7868A539B3274DF0A35FAFF51C501253F6ABB12F1C358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-17_d40f7a275c4c86ec1c593ac46531cbc0_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_d40f7a275c4c86ec1c593ac46531cbc0_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_d40f7a275c4c86ec1c593ac46531cbc0_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 4.8MB
- SHA256 be91e3bca20ef71a8f96616c325e2afa92775fd8ccfc3ea7d73079697c75381c
- MD5 d40f7a275c4c86ec1c593ac46531cbc0
- SHA1 259303ddda6099f635500f9b9c33654530d5c436
- SHA512 7eb606b59af205cdb48b977e46b9a427035c78158dea4de3b18ef31e623206a4f3d928c9e3741b91c184833aaad2e72f5d99d755846d29b1106fb9a22f140994
- SSDEEP 49152:08IIGo6ZIGFRi4DzpdLdN3jDk6BnASRDVKbxlEfWxepVOlWmn1bqX/X+HhS8KEXT:08PsWoTH5Vw+nX0cEWEXwu
- TLSH T117366C02BE9649E9D09AC874C7868A539B3274DF0A35FAFF51C501253F6ABB12F1C358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.