General
- Target 2026-08-19_cb64f36fb02a9fb4c4ddf51d507c1a2a_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom
- Size 6.2MB
- Sample260820-bth7zazyas
- SHA256 3b99c3b01c9b001a80969ad37779ceec888a9424de586786263132bf11ca66c5
- MD5 cb64f36fb02a9fb4c4ddf51d507c1a2a
- SHA1 66411946dec7ec50f290b6069744f278d865dfdc
- SHA512 37397650691b1adc64dd7494c86a62a2e68436f2ac16e9766d188ce5c8f8e82610d387743b6d91df933d1a447c6af65ef60ca77bb0c0f67a02c3515bb2774c9f
- SSDEEP 49152:3onLUINfqDlnTPxDkVTFYJm4+tYc5R3uIk4EHZPmDB4iI3zwbGzcg/DKUI8hYfGb:h404qbaulqKoxn+aK
- TLSH T11D566C03F285C1E8CC9EC075C35AD176AF36BCE95920B29F27A82A112E75F606F1D749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_cb64f36fb02a9fb4c4ddf51d507c1a2a_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_cb64f36fb02a9fb4c4ddf51d507c1a2a_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_cb64f36fb02a9fb4c4ddf51d507c1a2a_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom
- Size 6.2MB
- SHA256 3b99c3b01c9b001a80969ad37779ceec888a9424de586786263132bf11ca66c5
- MD5 cb64f36fb02a9fb4c4ddf51d507c1a2a
- SHA1 66411946dec7ec50f290b6069744f278d865dfdc
- SHA512 37397650691b1adc64dd7494c86a62a2e68436f2ac16e9766d188ce5c8f8e82610d387743b6d91df933d1a447c6af65ef60ca77bb0c0f67a02c3515bb2774c9f
- SSDEEP 49152:3onLUINfqDlnTPxDkVTFYJm4+tYc5R3uIk4EHZPmDB4iI3zwbGzcg/DKUI8hYfGb:h404qbaulqKoxn+aK
- TLSH T11D566C03F285C1E8CC9EC075C35AD176AF36BCE95920B29F27A82A112E75F606F1D749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.