General
- Target 2026-08-20_ad2a64eb4d75750eeec0ef6ba3fefbef_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 6.2MB
- Sample260821-c3wp4afk6x
- SHA256 1d3d6542fb814de547fd32171b4508f9bd1aea0985d58faf6621ee1a38c8f9b7
- MD5 ad2a64eb4d75750eeec0ef6ba3fefbef
- SHA1 4588e536668f455b815763c16b18eb5248b65864
- SHA512 138de2155440f4a4ab583f95406d38513313f83010ef561d2fc4f561f855f2028c2d45b6ec454778be0f71e2cf22866f306736187aedf194d3851923d5289d2d
- SSDEEP 98304:+ohlBKpiLYNeeViOns4bRTOMM7upAETE3Rp5a7CM/Rn+GQdR:PRKp7nLTO/tMpjQdR
- TLSH T1AD566B03E291C1E8C8AEC074C31AE677AF32BCED5525B19A6BE46B112F35F506B1D709
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_ad2a64eb4d75750eeec0ef6ba3fefbef_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_ad2a64eb4d75750eeec0ef6ba3fefbef_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_ad2a64eb4d75750eeec0ef6ba3fefbef_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 6.2MB
- SHA256 1d3d6542fb814de547fd32171b4508f9bd1aea0985d58faf6621ee1a38c8f9b7
- MD5 ad2a64eb4d75750eeec0ef6ba3fefbef
- SHA1 4588e536668f455b815763c16b18eb5248b65864
- SHA512 138de2155440f4a4ab583f95406d38513313f83010ef561d2fc4f561f855f2028c2d45b6ec454778be0f71e2cf22866f306736187aedf194d3851923d5289d2d
- SSDEEP 98304:+ohlBKpiLYNeeViOns4bRTOMM7upAETE3Rp5a7CM/Rn+GQdR:PRKp7nLTO/tMpjQdR
- TLSH T1AD566B03E291C1E8C8AEC074C31AE677AF32BCED5525B19A6BE46B112F35F506B1D709
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.