2026-08-22_b32e62cf72e88bcbb3e2751e21d882de_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-22_b32e62cf72e88bcbb3e2751e21d882de_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom
Size 31.2MB
Sample260823-cl33vaha83
SHA256 d8253ca54bf1ed8ae9fc4fc4d5d456f83297245038ce570f3a67d1d82bbc4de4
MD5 b32e62cf72e88bcbb3e2751e21d882de
SHA1 6ead7b0796f4e61f35c0d27ff0b9921d964a5295
SHA512 a8106f7c6d25b9e09f9e8f993060e63e19290658c3dded7ff1fca590a7cb8ca63a1d2685b0da567c53770f6ab1dea9530dba9df5ed0cb93f4a7a4b544fc068f7
SSDEEP 196608:/w0G6AZpnuZ0DlRGu4+NtJ2tm2GX6xtzfb1ZyuhA85jIf/w7HA:/wZxZ5uCDjGu4+NtJ2thGX6xZdzGT
TLSH
T1F77717117B9E686DD19AC870834A4B634B2170DB1B36BAFF44D496303F6EAB45B3D309
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_b32e62cf72e88bcbb3e2751e21d882de_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom

File Explorer

2026-08-22_b32e62cf72e88bcbb3e2751e21d882de_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom

.exe 31.2MB

2026-08-22_b32e62cf72e88bcbb3e2751e21d882de_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom

IMPHASH da628752b0d60d1e4b8fa45a4fa98caa
SHA256 d8253ca54bf1ed8ae9fc4fc4d5d456f83297245038ce570f3a67d1d82bbc4de4
MD5 b32e62cf72e88bcbb3e2751e21d882de
SHA1 6ead7b0796f4e61f35c0d27ff0b9921d964a5295
SHA512 a8106f7c6d25b9e09f9e8f993060e63e19290658c3dded7ff1fca590a7cb8ca63a1d2685b0da567c53770f6ab1dea9530dba9df5ed0cb93f4a7a4b544fc068f7
SSDEEP 196608:/w0G6AZpnuZ0DlRGu4+NtJ2tm2GX6xtzfb1ZyuhA85jIf/w7HA:/wZxZ5uCDjGu4+NtJ2thGX6xZdzGT
TLSH
T1F77717117B9E686DD19AC870834A4B634B2170DB1B36BAFF44D496303F6EAB45B3D309
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32753664

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcryptprimitives

ProcessPrng

kernel32

GetStringTypeW DuplicateHandle GetFileSizeEx SetStdHandle SetEnvironmentVariableW GetTimeZoneInformationForYear FlushFileBuffers CloseHandle GetBinaryTypeW GetLastError HeapSize GetDynamicTimeZoneInformation SetLastError FreeLibrary GetStdHandle GetConsoleMode SetConsoleMode GetConsoleScreenBufferInfo SetConsoleTextAttribute FindClose QueryPerformanceCounter CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject QueryPerformanceFrequency Sleep GetSystemInfo SwitchToThread GetFileInformationByHandle FindNextFileW CreateFileW CreateSemaphoreW WaitForSingleObjectEx CancelIo ReadDirectoryChangesW ReleaseSemaphore GetModuleHandleA GetProcAddress SetFileAttributesW MoveFileExW GetSystemTimePreciseAsFileTime VerSetConditionMask VerifyVersionInfoW GetCPInfo GetOEMCP GetACP IsValidCodePage GetCommandLineW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetFilePointerEx SleepEx WriteFileEx WaitForMultipleObjects GetOverlappedResult GetExitCodeProcess lstrlenW GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetCurrentDirectoryW LoadLibraryA GetCurrentProcess GetCurrentProcessId CreateMutexA WideCharToMultiByte ReleaseMutex GetConsoleOutputCP MultiByteToWideChar WriteConsoleW GetProcessHeap HeapReAlloc HeapAlloc HeapFree GetEnvironmentVariableW ReadFileEx GetModuleHandleW FormatMessageW CreateThread GetFullPathNameW SetFileTime SetFileInformationByHandle FindFirstFileExW GetFileInformationByHandleEx ReadConsoleW CreateDirectoryW ExitProcess CreateEventW ReadFile GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetModuleFileNameW GetFinalPathNameByHandleW GetFileType DeleteFileW GetEnvironmentVariableA WriteFile InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetProcessTimes GetCurrentProcessorNumber VirtualAlloc VirtualProtect VirtualFree VirtualQuery GetModuleHandleExA WriteConsoleA GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection TerminateProcess GetModuleHandleExW GetCommandLineA IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter LoadLibraryExW CompareStringW LCMapStringW

shell32

SHGetKnownFolderPath

combase

CoTaskMemFree

ntdll

NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile

userenv

GetUserProfileDirectoryW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

advapi32

LookupPrivilegeValueA AdjustTokenPrivileges OpenProcessToken

netapi32

NetApiBufferAllocate NetServerGetInfo NetApiBufferFree NetWkstaGetInfo

Name

.text

Size

22.7MB

Virtual Size

22.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

7.6MB

Virtual Size

7.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

29KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

812KB

Virtual Size

811KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

99KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-22_b32e62cf72e88bcbb3e2751e21d882de_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom

bcryptprimitives

kernel32

shell32

combase

ntdll

userenv

api-ms-win-core-synch-l1-2-0

advapi32

netapi32

generic