General
- Target 2026-08-19_7a1b26a5df4cd1bb0ca89ac2b778ed3d_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 16.1MB
- Sample260819-j6a15aea32
- SHA256 3bebf6ab53e11cd0f79316b703c0914521c4e1dda84b50417f3514d77e39f039
- MD5 7a1b26a5df4cd1bb0ca89ac2b778ed3d
- SHA1 d13f39cf327d47515cdf776c542e622d9d59f1b5
- SHA512 8c5a95915ea805d82df33bd71cb53e55614f7ad2ddd29a9185ffd60da70606b92baca7f1fe4bd0e90e43e5a9ac04983ab315f0c42e37b221c847bc0da2f12e15
- SSDEEP 393216:dIQBGMJsCBkqi6nOsP4HdMdFbjKYEsszw:dIQBGMJsCBkqi6n7gHdMdtKYk
- TLSH T19E07F7257A5B99ACD09BC47483478A724A3134DB0B35B9FF44C496382F7ABF46F38219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-19_7a1b26a5df4cd1bb0ca89ac2b778ed3d_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_7a1b26a5df4cd1bb0ca89ac2b778ed3d_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_7a1b26a5df4cd1bb0ca89ac2b778ed3d_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 16.1MB
- SHA256 3bebf6ab53e11cd0f79316b703c0914521c4e1dda84b50417f3514d77e39f039
- MD5 7a1b26a5df4cd1bb0ca89ac2b778ed3d
- SHA1 d13f39cf327d47515cdf776c542e622d9d59f1b5
- SHA512 8c5a95915ea805d82df33bd71cb53e55614f7ad2ddd29a9185ffd60da70606b92baca7f1fe4bd0e90e43e5a9ac04983ab315f0c42e37b221c847bc0da2f12e15
- SSDEEP 393216:dIQBGMJsCBkqi6nOsP4HdMdFbjKYEsszw:dIQBGMJsCBkqi6n7gHdMdtKYk
- TLSH T19E07F7257A5B99ACD09BC47483478A724A3134DB0B35B9FF44C496382F7ABF46F38219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.