General
- Target 2026-08-18_25e63a488356abc27588601aa91a99b5_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 597KB
- Sample260819-abkgmsshqg
- SHA256 cf7bb67b6a59778548c759d6251dec6d553c784662420a2bb23412019935d6b5
- MD5 25e63a488356abc27588601aa91a99b5
- SHA1 4addceef33297c712281dc83fe4249483e32cd8c
- SHA512 fd8b7eb4adb99f3030aa08b0c52a30e1280d23de7e9434c01511225853e21cf49aaa11993386dffeec571ab8fb404dde442b6a4ab8a4fccf5b1b5de29e650f42
- SSDEEP 6144:wA/LD4UcBdHwQob0917MvkW7SJRuj+tnHRHLTjkmpL/2DD51sZk6mDkA0rCjblEK:w3UCrLjxLTLh/WikU1EeXq
- TLSH T18FD42956F21AA0FCE517C0B4835AA532B676708A4B357DEF12949B353E1AFD06B3CB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_25e63a488356abc27588601aa91a99b5_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_25e63a488356abc27588601aa91a99b5_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_25e63a488356abc27588601aa91a99b5_akira_cobalt-strike_icedid_rusty-stealer_satacom
- Size 597KB
- SHA256 cf7bb67b6a59778548c759d6251dec6d553c784662420a2bb23412019935d6b5
- MD5 25e63a488356abc27588601aa91a99b5
- SHA1 4addceef33297c712281dc83fe4249483e32cd8c
- SHA512 fd8b7eb4adb99f3030aa08b0c52a30e1280d23de7e9434c01511225853e21cf49aaa11993386dffeec571ab8fb404dde442b6a4ab8a4fccf5b1b5de29e650f42
- SSDEEP 6144:wA/LD4UcBdHwQob0917MvkW7SJRuj+tnHRHLTjkmpL/2DD51sZk6mDkA0rCjblEK:w3UCrLjxLTLh/WikU1EeXq
- TLSH T18FD42956F21AA0FCE517C0B4835AA532B676708A4B357DEF12949B353E1AFD06B3CB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.