General
- Target 2026-08-22_a3a2727bea76fc647e68c6937b836364_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 38.2MB
- Sample260823-dzfedasdlh
- SHA256 38caa00da61187b82589fe4fd6c787568aa4372df85d9c2b295f5467f1d4bc01
- MD5 a3a2727bea76fc647e68c6937b836364
- SHA1 e468c339cd89584c5066fd4f4c85d9d2d427328b
- SHA512 3ad85c2b9935697708d63e8b35d517fd0757c148e5c05f41a19e6cd4be56bf4e72685bce8611bd57a691798e3bd70847ee7b98e1795990115ca400d7d8b7608b
- SSDEEP 786432:+V0CMgsht2GLdNqJwfpd3Sg/JtEF6Gs4LOkGS:+hMgsht2GLdNqJwfpd3SgwF6G9
- TLSH T1A797F715BA4B996CE04BC4B083478A664A3034DB0A3579BF15D4A2383F7E7F56F2871E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-22_a3a2727bea76fc647e68c6937b836364_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_a3a2727bea76fc647e68c6937b836364_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_a3a2727bea76fc647e68c6937b836364_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 38.2MB
- SHA256 38caa00da61187b82589fe4fd6c787568aa4372df85d9c2b295f5467f1d4bc01
- MD5 a3a2727bea76fc647e68c6937b836364
- SHA1 e468c339cd89584c5066fd4f4c85d9d2d427328b
- SHA512 3ad85c2b9935697708d63e8b35d517fd0757c148e5c05f41a19e6cd4be56bf4e72685bce8611bd57a691798e3bd70847ee7b98e1795990115ca400d7d8b7608b
- SSDEEP 786432:+V0CMgsht2GLdNqJwfpd3Sg/JtEF6Gs4LOkGS:+hMgsht2GLdNqJwfpd3SgwF6G9
- TLSH T1A797F715BA4B996CE04BC4B083478A664A3034DB0A3579BF15D4A2383F7E7F56F2871E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.