Overview

overview

10

Static

static

10

2026-08-19...om.exe

windows10-2004-x64

1

2026-08-19...om.exe

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    137s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/08/2026, 16:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-19_f73bd625cc2a1aa7d6d3984685a0e0e7_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom.exe
  • Size 8.1MB
  • Sample260819-vbddjsycka
  • SHA256 00dd0e37045462145c9101cec45c6bd21aa4151109c4307ce8811525b6b69553
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
ransomware

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-19_f73bd625cc2a1aa7d6d3984685a0e0e7_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-19_f73bd625cc2a1aa7d6d3984685a0e0e7_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5740
    • C:\Windows\system32\notepad.exe
      "notepad.exe" C:\Users\Admin\AppData\Local\SC_Starter\config.toml
      2⤵
      • Opens file in notepad (likely ransom note)
      PID:1588

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        config.toml
        • Path C:\Users\Admin\AppData\Local\SC_Starter\config.toml
        • Size 3KB
        • SHA256 6e9f0ec11a5fff8202f611a46e679f5eaec400bebcecf3084054a9a36e5e88d5
        • MD5 SHA1 SHA512 TLSH
        Submit Download