General
- Target 2026-08-27_f4dbd4b0427a407a10f185c61c718a68_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 12.1MB
- Sample260828-bxwmgabe58
- SHA256 c04295ac710d1837d53ded9b960910e6aa7d9baf2f96f591314e1c2b42d45a48
- MD5 f4dbd4b0427a407a10f185c61c718a68
- SHA1 4dab61300a3eb3c6deb760996806ce315f4014fc
- SHA512 a3f06c4c968921e14090c930093dc733bd2130c33760b917612de4fca74b485a65af9042b2f81e0f34fa12e4dbf828d37644fe49c6b0a78c08b561f1c372facf
- SSDEEP 196608:yzJrOkaKfwtY1Irn+D7BgDTEmPAwatIj0DK/kLwx:Sba8wtY1I7+HBgD1I6E6kL
- TLSH T158D6BF07F64481F8C4AEC278C36B9532EA72F889452472AF17E45B112F2BF606F1D799
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_f4dbd4b0427a407a10f185c61c718a68_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_f4dbd4b0427a407a10f185c61c718a68_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_f4dbd4b0427a407a10f185c61c718a68_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 12.1MB
- SHA256 c04295ac710d1837d53ded9b960910e6aa7d9baf2f96f591314e1c2b42d45a48
- MD5 f4dbd4b0427a407a10f185c61c718a68
- SHA1 4dab61300a3eb3c6deb760996806ce315f4014fc
- SHA512 a3f06c4c968921e14090c930093dc733bd2130c33760b917612de4fca74b485a65af9042b2f81e0f34fa12e4dbf828d37644fe49c6b0a78c08b561f1c372facf
- SSDEEP 196608:yzJrOkaKfwtY1Irn+D7BgDTEmPAwatIj0DK/kLwx:Sba8wtY1I7+HBgD1I6E6kL
- TLSH T158D6BF07F64481F8C4AEC278C36B9532EA72F889452472AF17E45B112F2BF606F1D799
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Checks whether UAC is enabled
-
Suspicious use of SetThreadContext