2026-08-19_4356c5987ff98dd1cc7a1fbcf3be93bc_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-19_4356c5987ff98dd1cc7a1fbcf3be93bc_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom
Size 12.7MB
Sample260819-glrr2ael91
SHA256 39f975ecfec9ee9cbd2071427ece33e98acbe4d715a738b3a61fc05c8c80aa5c
MD5 4356c5987ff98dd1cc7a1fbcf3be93bc
SHA1 fd4a5ac6fe81ef6bb698ae6b72c308c55ada54ee
SHA512 92a035a94b76524c1e9b0b5bdb78027b0c0dc3d6b8ecf94efb163633b1f6364f8a95bc84ac0e51a4d863218d8cecadc4b5989d08df97d7509ffde61ebaaa1dc2
SSDEEP 98304:qajzJmyFWqbbyEImPdTW0/UKd52LijkhbScJzG10Ok29CERtxE0S25CbJDTo+uZl:j0aPgh5quo+cwmgsYCH2
TLSH
T14CD65B43E26291ECC129C07493166233FA72BC4943357AEB7BDC7A213F75F906A29B15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_4356c5987ff98dd1cc7a1fbcf3be93bc_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom

File Explorer

2026-08-19_4356c5987ff98dd1cc7a1fbcf3be93bc_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom

.exe 12.7MB

2026-08-19_4356c5987ff98dd1cc7a1fbcf3be93bc_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom

IMPHASH 91a36b44335be46bf3a3ee77ff60ab7c
SHA256 39f975ecfec9ee9cbd2071427ece33e98acbe4d715a738b3a61fc05c8c80aa5c
MD5 4356c5987ff98dd1cc7a1fbcf3be93bc
SHA1 fd4a5ac6fe81ef6bb698ae6b72c308c55ada54ee
SHA512 92a035a94b76524c1e9b0b5bdb78027b0c0dc3d6b8ecf94efb163633b1f6364f8a95bc84ac0e51a4d863218d8cecadc4b5989d08df97d7509ffde61ebaaa1dc2
SSDEEP 98304:qajzJmyFWqbbyEImPdTW0/UKd52LijkhbScJzG10Ok29CERtxE0S25CbJDTo+uZl:j0aPgh5quo+cwmgsYCH2
TLSH
T14CD65B43E26291ECC129C07493166233FA72BC4943357AEB7BDC7A213F75F906A29B15
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7846736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Muh_Patcher.pdb

kernel32

GetStartupInfoW GlobalSize GetModuleHandleA RtlLookupFunctionEntry SetLastError WaitForSingleObjectEx LoadLibraryA GetCurrentProcess GetCurrentProcessId CreateMutexA ReleaseMutex GetExitCodeProcess FormatMessageW SetHandleInformation CompareStringOrdinal GetSystemDirectoryW GetSystemTimeAsFileTime CreateProcessW DuplicateHandle CreateThread SleepEx ExitProcess HeapAlloc SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive RtlPcToFileHeader RaiseException FlsAlloc GlobalFree FlsGetValue WaitForSingleObject SwitchToThread FlsSetValue FlsFree GetModuleHandleExW EncodePointer TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent SystemTimeToTzSpecificLocalTime LCIDToLocaleName GetUserDefaultUILanguage VirtualProtect CompareStringW LoadLibraryExA LCMapStringW MultiByteToWideChar IsValidCodePage GetOEMCP OutputDebugStringA OutputDebugStringW GetCPInfo RtlUnwind GetStringTypeW HeapSize GetACP ReleaseSRWLockExclusive SetWaitableTimer GetSystemTimePreciseAsFileTime Sleep GetModuleHandleW CreateWaitableTimerExW GetCurrentThreadId GlobalAlloc lstrlenW WideCharToMultiByte GlobalLock GlobalUnlock LoadLibraryW GetCurrentThread CloseHandle HeapReAlloc HeapFree GetProcessHeap SetThreadStackGuarantee GetWindowsDirectoryW GetModuleFileNameW LoadLibraryExW SetThreadErrorMode FreeLibrary GetProcAddress GetLastError SetConsoleMode LockFileEx GetFileInformationByHandleEx ReadConsoleInputW SetStdHandle GetQueuedCompletionStatusEx CreatePipe GetFileAttributesExW GetFileSizeEx UnhandledExceptionFilter GetCommandLineA WriteFile FileTimeToSystemTime PeekNamedPipe GetFileType GetDriveTypeW DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection RtlUnwindEx CreateIoCompletionPort SetUnhandledExceptionFilter InitializeSListHead SetFileCompletionNotificationModes RtlCaptureContext RtlVirtualUnwind GetCurrentDirectoryW GetConsoleOutputCP WriteConsoleW GetEnvironmentVariableW QueryPerformanceFrequency GetTempPathW GetFileInformationByHandle GetFullPathNameW CreateFileW GetFinalPathNameByHandleW FindNextFileW CreateDirectoryW FindFirstFileExW ReadConsoleW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileAttributesW ReadFileEx WriteFileEx DeleteFileW CopyFileExW SetCurrentDirectoryW GetConsoleCP SetConsoleCP SetConsoleOutputCP GetConsoleWindow SetFilePointerEx GetConsoleMode QueryPerformanceCounter FlushFileBuffers FindClose SetEnvironmentVariableW UnlockFileEx GetTimeZoneInformation ReadFile SetEndOfFile SetFileInformationByHandle SetFileAttributesW MoveFileExW AddVectoredExceptionHandler GetCommandLineW PostQueuedCompletionStatus GetStdHandle

ntdll

RtlGetVersion NtCancelIoFileEx NtDeviceIoControlFile NtCreateFile NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile NtOpenFile NtReadFile

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

shell32

DragQueryFileW DragFinish SHAppBarMessage ShellExecuteW SHGetKnownFolderPath ShellExecuteExW

ole32

CoInitializeEx CoInitializeSecurity RegisterDragDrop CoCreateInstance CoTaskMemFree CoCreateFreeThreadedMarshaler CoIncrementMTAUsage RevokeDragDrop CoSetProxyBlanket OleInitialize CoTaskMemAlloc CoUninitialize

user32

SetCursorPos SetWindowPlacement ChangeDisplaySettingsExW SetWindowDisplayAffinity KillTimer SetTimer CreateIconFromResourceEx EnumDisplayMonitors IsIconic GetWindowPlacement GetMenu ReleaseDC OpenClipboard MessageBoxW LoadCursorW SetCursor CreateWindowExA RegisterClassExA DefWindowProcA SetClipboardData CloseClipboard CreateWindowExW SetWindowLongPtrW GetWindowRect GetMessageW RegisterRawInputDevices SetForegroundWindow GetWindowTextLengthW GetWindowTextW GetMonitorInfoW IsClipboardFormatAvailable GetCursorPos CloseTouchInputHandle GetTouchInputInfo GetClipboardData SetCapture GetClassNameW GetClassInfoExW RegisterClassExW MapVirtualKeyW GetActiveWindow SystemParametersInfoW ReleaseCapture FillRect RegisterWindowMessageA MonitorFromRect GetKeyboardLayout ToUnicodeEx DestroyIcon ShowWindow GetSystemMenu MonitorFromPoint AdjustWindowRectEx IsWindow EnableMenuItem SetWindowLongW GetSystemMetrics RegisterTouchWindow SendMessageW PostMessageW GetWindow SetFocus ShowCursor ClientToScreen ScreenToClient DefWindowProcW GetKeyboardState GetClipCursor GetKeyState GetAsyncKeyState GetUpdateRect ValidateRect GetRawInputData SetWindowTextW InvalidateRgn GetWindowLongW MsgWaitForMultipleObjectsEx DispatchMessageW PeekMessageW PostThreadMessageW EnumWindows FlashWindowEx MapVirtualKeyExW IsProcessDPIAware GetDC MonitorFromWindow EnumChildWindows DispatchMessageA TranslateMessage GetMessageA SetWindowPos GetClientRect ClipCursor GetForegroundWindow SetPropW EmptyClipboard TrackMouseEvent SystemParametersInfoA EnumDisplaySettingsA EnumDisplayDevicesA WaitForInputIdle CreateIcon DestroyWindow GetWindowLongPtrW SendInput RedrawWindow

comctl32

RemoveWindowSubclass DefSubclassProc SetWindowSubclass

oleaut32

SysAllocStringLen SysFreeString SafeArrayAccessData GetErrorInfo SafeArrayUnaccessData VariantClear SetErrorInfo SysStringLen

gdi32

CreateRectRgn GetDeviceCaps DeleteObject CreateSolidBrush SwapBuffers DescribePixelFormat ChoosePixelFormat SetPixelFormat GetPixelFormat

shlwapi

SHCreateMemStream AssocQueryStringW

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext ImmAssociateContextEx ImmGetCompositionStringW ImmGetContext

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow

advapi32

ImpersonateAnonymousToken RevertToSelf EventUnregister EventWriteTransfer EventSetInformation EventRegister RegQueryValueExW RegOpenKeyExW SystemFunction036 RegCloseKey RegSetValueExW RegCreateKeyExW RegGetValueW

uxtheme

SetWindowTheme

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness

opengl32

wglDeleteContext wglGetProcAddress wglMakeCurrent wglGetCurrentContext wglCreateContext wglGetCurrentDC wglShareLists

bcrypt

BCryptGenRandom

ws2_32

shutdown send recv WSACleanup WSAStartup freeaddrinfo getaddrinfo bind WSAIoctl WSASocketW WSASend getsockname getpeername setsockopt getsockopt closesocket select connect WSAGetLastError ioctlsocket

crypt32

CertAddCertificateContextToStore CertVerifyCertificateChainPolicy CertDuplicateCertificateChain CertFreeCertificateChain CertFreeCertificateContext CertDuplicateStore CertOpenStore CertCloseStore CertEnumCertificatesInStore CertDuplicateCertificateContext CertGetCertificateChain

secur32

DecryptMessage AcquireCredentialsHandleA ApplyControlToken InitializeSecurityContextW AcceptSecurityContext FreeCredentialsHandle QueryContextAttributesW DeleteSecurityContext FreeContextBuffer EncryptMessage

comdlg32

GetOpenFileNameW

Name

.text

Size

7.9MB

Virtual Size

7.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

152KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

36KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_4356c5987ff98dd1cc7a1fbcf3be93bc_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom

kernel32

ntdll

bcryptprimitives

api-ms-win-core-synch-l1-2-0

shell32

ole32

user32

comctl32

oleaut32

gdi32

shlwapi

imm32

dwmapi

advapi32

uxtheme

api-ms-win-shcore-scaling-l1-1-1

opengl32

bcrypt

ws2_32

crypt32

secur32

comdlg32

generic