General
- Target 2026-08-17_20c5d397d68a3527d45dfc7e53e60f78_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom
- Size 72.3MB
- Sample260818-a2m1fsbr61
- SHA256 8ceb65162f2932b3b077593ee894f6caf92ef1ebdf83e0da95c1b8685b5e7b33
- MD5 20c5d397d68a3527d45dfc7e53e60f78
- SHA1 37b6671024a405815691ee92e46ca239d85410ef
- SHA512 2d592c3085e727d4f3fb1fe88647639707edef4fb51ef8d464d7dd21f911d8c78b1f1720b88e53bf1acb86f107438c2a92030781c0c0edb8fbadc4238dda7bed
- SSDEEP 786432:jC5q+/6FAZ9920wHarxwFKW8cBVdVAadngkS:Y80e6K8W8cBVdVAa5g
- TLSH T106F7D511BB5EA86CD197C874834A8B734B7430DB1A36B9BF54C452353FAE6B46B2C309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_20c5d397d68a3527d45dfc7e53e60f78_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_20c5d397d68a3527d45dfc7e53e60f78_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_20c5d397d68a3527d45dfc7e53e60f78_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom
- Size 72.3MB
- SHA256 8ceb65162f2932b3b077593ee894f6caf92ef1ebdf83e0da95c1b8685b5e7b33
- MD5 20c5d397d68a3527d45dfc7e53e60f78
- SHA1 37b6671024a405815691ee92e46ca239d85410ef
- SHA512 2d592c3085e727d4f3fb1fe88647639707edef4fb51ef8d464d7dd21f911d8c78b1f1720b88e53bf1acb86f107438c2a92030781c0c0edb8fbadc4238dda7bed
- SSDEEP 786432:jC5q+/6FAZ9920wHarxwFKW8cBVdVAadngkS:Y80e6K8W8cBVdVAa5g
- TLSH T106F7D511BB5EA86CD197C874834A8B734B7430DB1A36B9BF54C452353FAE6B46B2C309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
UPX dump on OEP (original entry point)