7faece50c9041603fc92f2ee9dcc431825e6bb5223a904385e610f8e70df40ee

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 00:29

Target
2026-08-19_3834d772974bb3efee2e7f82c2c2b117_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 5.9MB
Sample260820-asyetscl8y
SHA256 7faece50c9041603fc92f2ee9dcc431825e6bb5223a904385e610f8e70df40ee
MD5 3834d772974bb3efee2e7f82c2c2b117
SHA1 3902fb2728634632cab10802c8949ab10a9a9c38
SHA512 ec1c872400144f305416f001a09098f0d089d258e30027858736c7572694330ab697740b242fd9f9d56efe66612ba1b72deb62010e0d93459bbf8c7b50c71c05
SSDEEP 49152:tHal9dGjZfa/0fVBSVgGTA86UkuZfc15Cx5uVZ3VE5z/kIGLYrJWd6h3AAf4Dloh:raE4Lpu+x5upe7dgIxgICH+
TLSH
T1C2566C43F6A681ECC16AC474871A5233FB72B88907207AEB56D08A313F52FE05E7D759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

C:\Users\Admin\AppData\Local\Temp\2026-08-19_3834d772974bb3efee2e7f82c2c2b117_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_3834d772974bb3efee2e7f82c2c2b117_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
PID:4660

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact