Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/08/2026, 01:05
Behavioral task
behavioral1
Sample
2026-08-23_b14300b8cb985d44afbc85a0a5fb9a89_akira_cobalt-strike_glassworm_quasar-rat_satacom_xrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_b14300b8cb985d44afbc85a0a5fb9a89_akira_cobalt-strike_glassworm_quasar-rat_satacom_xrat.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-23_b14300b8cb985d44afbc85a0a5fb9a89_akira_cobalt-strike_glassworm_quasar-rat_satacom_xrat.exe
- Size 6.5MB
- Sample260824-bfzb2axsft
- SHA256 de0f93edb0c1265ce978da71ce47b70b6b3d1e4c45e1a0d6b81ac49be0d583c0
- MD5 b14300b8cb985d44afbc85a0a5fb9a89
- SHA1 d27eab10852c08fc28cb01fcacb12af4179d63eb
- SHA512 819a23cf7f2e37928b3bdd956675bc9d0df64f6a558de008a4c92e2b290d32cedd3804947bcf6e63da26367ecc03501bae47deb2759175d02e6e428a1caaeeb5
- SSDEEP 49152:Y68ON28AO7OeeQuiaT2OjIqiFop7pbWmyMKkb1/r8RZ0w/pbU4qt/yecPQGRnvV8:E5WXsL1pnBhwUwCCHc+FkeFPQ
- TLSH T17866B616A76961DAD07FC078D2839F22BD603499073977F7898096692F20FF8AD3D364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Enumerates system info in registry 2 TTPs 2 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS 2026-08-23_b14300b8cb985d44afbc85a0a5fb9a89_akira_cobalt-strike_glassworm_quasar-rat_satacom_xrat.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName 2026-08-23_b14300b8cb985d44afbc85a0a5fb9a89_akira_cobalt-strike_glassworm_quasar-rat_satacom_xrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-23_b14300b8cb985d44afbc85a0a5fb9a89_akira_cobalt-strike_glassworm_quasar-rat_satacom_xrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-23_b14300b8cb985d44afbc85a0a5fb9a89_akira_cobalt-strike_glassworm_quasar-rat_satacom_xrat.exe"1⤵
- Enumerates system info in registry
PID:2424