2026-08-31_167d15ef2b328ee8d7fec10b278f9eb0_akira_cobalt-strike_glassworm_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-31_167d15ef2b328ee8d7fec10b278f9eb0_akira_cobalt-strike_glassworm_satacom_vidar
Size 11.9MB
Sample260831-2rbcfsfl71
SHA256 d2b31e58c61c1565af87f605ba5a8cf278611b9f224b7bda902d56204ea22fd1
MD5 167d15ef2b328ee8d7fec10b278f9eb0
SHA1 3c8d0ad0fcf719e0bc33933ac80889604d4dd2a7
SHA512 54667d08ac22fc58c48f062a732175610d83c255ac99fcbe6ade4cbeea438d8622313638b8e3fcac21b154fee5dff6e6204e92204addf66dce67a90991c7693b
SSDEEP 98304:SAAHjI3CQ5bClKNBhb5eMi4svg23+sRYRDb5Ae9bm:SrEElgj23tYvph
TLSH
T16BC65A137B4699ADC09AC070C246D6AA1A317CDA0B35BBFF15C466382E75BF01F3DA58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-31_167d15ef2b328ee8d7fec10b278f9eb0_akira_cobalt-strike_glassworm_satacom_vidar

File Explorer

2026-08-31_167d15ef2b328ee8d7fec10b278f9eb0_akira_cobalt-strike_glassworm_satacom_vidar

.exe 11.9MB

2026-08-31_167d15ef2b328ee8d7fec10b278f9eb0_akira_cobalt-strike_glassworm_satacom_vidar

IMPHASH ebe4e82f99c0c7cc5daba92725b152f8
SHA256 d2b31e58c61c1565af87f605ba5a8cf278611b9f224b7bda902d56204ea22fd1
MD5 167d15ef2b328ee8d7fec10b278f9eb0
SHA1 3c8d0ad0fcf719e0bc33933ac80889604d4dd2a7
SHA512 54667d08ac22fc58c48f062a732175610d83c255ac99fcbe6ade4cbeea438d8622313638b8e3fcac21b154fee5dff6e6204e92204addf66dce67a90991c7693b
SSDEEP 98304:SAAHjI3CQ5bClKNBhb5eMi4svg23+sRYRDb5Ae9bm:SrEElgj23tYvph
TLSH
T16BC65A137B4699ADC09AC070C246D6AA1A317CDA0B35BBFF15C466382E75BF01F3DA58
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6542364

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\kevin\src\ovrlay\target\release\deps\ovrlay.pdb

shell32

SHGetKnownFolderPath DragQueryFileW SHGetFolderPathW Shell_NotifyIconW DragFinish ShellExecuteW

opengl32

wglShareLists wglCreateContext wglGetProcAddress wglDeleteContext wglMakeCurrent wglGetCurrentContext wglGetCurrentDC

ntdll

RtlCaptureContext RtlVirtualUnwind NtCancelIoFileEx RtlLookupFunctionEntry NtDeviceIoControlFile RtlNtStatusToDosError NtCreateFile

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW SystemFunction036

comctl32

ord410 ord412 ord413

dwmapi

DwmEnableBlurBehindWindow

gdi32

DeleteObject CreateRectRgn DescribePixelFormat GetPixelFormat ChoosePixelFormat SetPixelFormat GetDeviceCaps SwapBuffers

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext

kernel32

InitializeCriticalSectionAndSpinCount SetEvent ResetEvent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead DeleteCriticalSection ExitProcess IsDebuggerPresent CreateThread QueryPerformanceFrequency WriteConsoleW CloseHandle AcquireSRWLockExclusive ReleaseSRWLockExclusive GetModuleHandleW CreateFileW GetCurrentThreadId GetConsoleWindow LoadLibraryA GetProcAddress GetStdHandle GetConsoleMode GetFileInformationByHandleEx WideCharToMultiByte FreeLibrary LoadLibraryExA GetEnvironmentVariableA CreateDirectoryW GetLastError lstrlenW SetHandleInformation GetCurrentProcessId TryAcquireSRWLockExclusive GlobalUnlock GlobalLock GlobalSize GlobalAlloc GlobalFree MultiByteToWideChar GetCurrentProcess GetCurrentThread ReleaseMutex WaitForSingleObjectEx CreateMutexA LoadLibraryW LoadLibraryExW SetThreadErrorMode SetErrorMode Sleep FormatMessageW GetFinalPathNameByHandleW GetFileInformationByHandle GetConsoleScreenBufferInfo SetConsoleTextAttribute SetConsoleMode SetConsoleCtrlHandler CancelIoEx SetFileCompletionNotificationModes WriteFile ReadFile GetOverlappedResult CreateEventW CreateIoCompletionPort GetQueuedCompletionStatusEx PostQueuedCompletionStatus GetModuleHandleA SleepConditionVariableSRW GetSystemInfo InitializeCriticalSection LeaveCriticalSection ReleaseSRWLockShared SwitchToThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW SetEnvironmentVariableW EnterCriticalSection WaitForSingleObject TerminateProcess WakeAllConditionVariable WakeConditionVariable TryEnterCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime TlsGetValue TlsSetValue TlsAlloc HeapAlloc GetProcessHeap HeapFree HeapReAlloc AcquireSRWLockShared AddVectoredExceptionHandler SetThreadStackGuarantee DeviceIoControl

ole32

CoCreateInstance CoInitializeEx CoTaskMemFree RegisterDragDrop OleInitialize RevokeDragDrop CoUninitialize

user32

GetDC LookupIconIdFromDirectoryEx CreateIconFromResourceEx CopyIcon DestroyIcon DestroyMenu CreatePopupMenu AppendMenuW TrackPopupMenu SetLayeredWindowAttributes GetWindowPlacement ReleaseCapture OpenClipboard CloseClipboard GetClipboardData EmptyClipboard SetClipboardData GetClassNameW GetClassInfoExW RegisterClassExW GetRawInputData RegisterRawInputDevices MsgWaitForMultipleObjectsEx SetCapture GetMenu AdjustWindowRectEx ShowCursor GetClipCursor ClipCursor GetActiveWindow IsProcessDPIAware SendMessageW SetWindowTextW MapVirtualKeyW SendInput SetWindowLongW SystemParametersInfoA GetKeyState GetKeyboardState GetKeyboardLayout ToUnicodeEx CreateIcon ShowWindow SetWindowPlacement DestroyWindow PostMessageW SetWindowLongPtrW RegisterClassW CreateWindowExW RegisterWindowMessageA GetWindowLongPtrW GetCursorPos SetForegroundWindow DefWindowProcW GetMessageW TranslateMessage DispatchMessageW PostThreadMessageW RedrawWindow ChangeDisplaySettingsExW PeekMessageW SetWindowPos InvalidateRgn ValidateRect GetUpdateRect MapVirtualKeyA MonitorFromRect LoadCursorW SetCursor TrackMouseEvent GetTouchInputInfo ScreenToClient CloseTouchInputHandle GetWindowLongW GetClientRect ClientToScreen MonitorFromWindow GetMonitorInfoW GetSystemMetrics RegisterTouchWindow

uxtheme

SetWindowTheme

ws2_32

getsockopt ioctlsocket connect send WSASocketW shutdown closesocket WSASend recv setsockopt WSAIoctl WSAGetLastError getpeername WSAStartup freeaddrinfo WSACleanup getaddrinfo bind

bcrypt

BCryptGenRandom

msvcp140

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z _Mtx_init_in_situ _Mtx_destroy_in_situ _Mtx_lock _Mtx_unlock ?_Throw_C_error@std@@YAXH@Z ?uncaught_exception@std@@YA_NXZ ?_Xbad_alloc@std@@YAXXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memcpy memset memmove __CxxFrameHandler3 memcmp __C_specific_handler __current_exception __current_exception_context __std_exception_copy _CxxThrowException __std_exception_destroy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-math-l1-1-0

ceil floor __setusermatherr atan2f _hypotf sinf cosf truncf ceilf round log2f floorf trunc exp2f powf expf _dclass roundf

api-ms-win-crt-runtime-l1-1-0

_wassert terminate _crt_atexit _register_onexit_function strerror _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _set_app_type _invalid_parameter_noinfo_noreturn _seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

__p__commode _wfsopen fclose fread fseek ftell _set_fmode __stdio_common_vsprintf __acrt_iob_func __stdio_common_vfprintf __stdio_common_vsprintf_s

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh malloc free

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-31_167d15ef2b328ee8d7fec10b278f9eb0_akira_cobalt-strike_glassworm_satacom_vidar

shell32

opengl32

ntdll

advapi32

comctl32

dwmapi

gdi32

imm32

kernel32

ole32

user32

uxtheme

ws2_32

bcrypt

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic