0d1c892eaa047b7bb939c7dd72f6a6c63752f66e20b8a1081a360b2e109930d7 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

2026-08-20...om.exe

windows10-2004-x64

6

2026-08-20...om.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_53ceda68207ecebb6a53a7f9d92db56f_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 25.4MB
Sample260820-l47cnavanc
SHA256 0d1c892eaa047b7bb939c7dd72f6a6c63752f66e20b8a1081a360b2e109930d7
MD5 53ceda68207ecebb6a53a7f9d92db56f
SHA1 95114275935b238e370ed341d091a7b6d25ccf1b
SHA512 9f6f00532dceea2588f823745fc77e4b16e691a4726699b6f1f4a83cf45da9cd6f6cc8635f3671516e9ba1f09a99cb9c1a20a4dc8372c1a79456c5cb071935e3
SSDEEP 393216:+OrofZIGutgWWUktROqBtEQAOxJThoGeJG5:+OrgputdW1tRrBhAOxJdvz
TLSH
T1C547BF03F76241E8C4AEC5B4836AA233EB76BC8D493472AB5BD44B212F66F505F1D709
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-20_53ceda68207ecebb6a53a7f9d92db56f_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion discovery persistence trojan

Behavioral task

behavioral2

Sample

2026-08-20_53ceda68207ecebb6a53a7f9d92db56f_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

defense_evasion discovery persistence trojan

Malware Config

Targets

- Target
  2026-08-20_53ceda68207ecebb6a53a7f9d92db56f_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 25.4MB
- SHA256 0d1c892eaa047b7bb939c7dd72f6a6c63752f66e20b8a1081a360b2e109930d7
- MD5 53ceda68207ecebb6a53a7f9d92db56f
- SHA1 95114275935b238e370ed341d091a7b6d25ccf1b
- SHA512 9f6f00532dceea2588f823745fc77e4b16e691a4726699b6f1f4a83cf45da9cd6f6cc8635f3671516e9ba1f09a99cb9c1a20a4dc8372c1a79456c5cb071935e3
- SSDEEP 393216:+OrofZIGutgWWUktROqBtEQAOxJThoGeJG5:+OrgputdW1tRrBhAOxJdvz
- TLSH
  T1C547BF03F76241E8C4AEC5B4836AA233EB76BC8D493472AB5BD44B212F66F505F1D709
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistencetrojan

behavioral2

defense_evasiondiscoverypersistencetrojan

© 2018-2026

Terms | Privacy