2026-08-30_ec3afd08a998edf0cd5feb6cb1bf2957_akira_cobalt-strike_glassworm_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-30_ec3afd08a998edf0cd5feb6cb1bf2957_akira_cobalt-strike_glassworm_satacom
Size 667KB
Sample260831-bzhtdsec62
SHA256 650c7584ef3cbef7112c1e243e7c8ad068b7db9b3341ba7b95311740da10c030
MD5 ec3afd08a998edf0cd5feb6cb1bf2957
SHA1 1d725b3035ee7115b0daf368bd6a2e0da72f7f0e
SHA512 9bf2ba39b81bd02170ffe502e5cfa6be669c255aa8dd51a9ac319d73448d00e8e5e4638d26797222ebc4339a706f5a21d00df1ccec6da7b46fd44eee0f46b79a
SSDEEP 6144:k7AbLCkUzt2Xko9vc3NJ+tl+GUph0lhSMXlBXBWvtfY8tfY8tfYttfYEtfYItfYa:k7HkUJy/9Uph0lhSMXlMvrYDvuIhb0m
TLSH
T199E49C17E68A58A9CA458531F1C664D1A333FC190B7924DF0FD4BEE63A36A90673F6C0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_ec3afd08a998edf0cd5feb6cb1bf2957_akira_cobalt-strike_glassworm_satacom

File Explorer

2026-08-30_ec3afd08a998edf0cd5feb6cb1bf2957_akira_cobalt-strike_glassworm_satacom

.exe 667KB

2026-08-30_ec3afd08a998edf0cd5feb6cb1bf2957_akira_cobalt-strike_glassworm_satacom

IMPHASH 6b93f22f2d847af96c555736a5f8610c
SHA256 650c7584ef3cbef7112c1e243e7c8ad068b7db9b3341ba7b95311740da10c030
MD5 ec3afd08a998edf0cd5feb6cb1bf2957
SHA1 1d725b3035ee7115b0daf368bd6a2e0da72f7f0e
SHA512 9bf2ba39b81bd02170ffe502e5cfa6be669c255aa8dd51a9ac319d73448d00e8e5e4638d26797222ebc4339a706f5a21d00df1ccec6da7b46fd44eee0f46b79a
SSDEEP 6144:k7AbLCkUzt2Xko9vc3NJ+tl+GUph0lhSMXlBXBWvtfY8tfY8tfYttfYEtfYItfYa:k7HkUJy/9Uph0lhSMXlMvrYDvuIhb0m
TLSH
T199E49C17E68A58A9CA458531F1C664D1A333FC190B7924DF0FD4BEE63A36A90673F6C0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

223872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

updater-x64-ReleaseLTCG.pdb

user32

AdjustWindowRectExForDpi CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EnableMenuItem EnableWindow GetClientRect GetCursorPos GetDpiForSystem GetDpiForWindow GetMonitorInfoW GetSystemMenu GetWindowLongPtrA GetWindowRect LoadCursorW LoadIconW MessageBoxA MessageBoxW MonitorFromPoint PeekMessageW RedrawWindow RegisterClassExW SendMessageW SetForegroundWindow SetWindowLongPtrW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoForDpi TranslateMessage

kernel32

CloseHandle CreateDirectoryW CreateFileW CreateToolhelp32Snapshot DeleteFileW FormatMessageW FreeLibrary GetCurrentDirectoryA GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableA GetEnvironmentVariableW GetFileAttributesW GetLastError GetLocalTime GetModuleFileNameA GetModuleFileNameW GetModuleHandleW GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetSystemTimeAsFileTime GetThreadContext GetThreadId GetVersionExA HeapAlloc HeapFree HeapReAlloc InitializeSListHead LoadLibraryW LocalFree MoveFileExW MulDiv MultiByteToWideChar OpenProcess OpenThread OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadProcessMemory RemoveDirectoryW ResumeThread RtlCaptureContext SetConsoleTextAttribute SetLastError SetUnhandledExceptionFilter SuspendThread TerminateProcess Thread32First Thread32Next WaitForSingleObject WideCharToMultiByte WriteConsoleA WriteFile

version

GetFileVersionInfoA GetFileVersionInfoExW GetFileVersionInfoSizeA GetFileVersionInfoSizeExW VerQueryValueW

shell32

CommandLineToArgvW SHCreateItemFromParsingName ShellExecuteA ShellExecuteW

ole32

CoCreateInstance CoInitializeEx CoUninitialize

comctl32

ord17

gdi32

CreateFontIndirectW DeleteObject

msvcp140

??0_Locinfo@std@@QEAA@PEBD@Z ??0_Lockit@std@@QEAA@H@Z ??0facet@locale@std@@IEAA@_K@Z ??1_Locinfo@std@@QEAA@XZ ??1_Lockit@std@@QEAA@XZ ??1facet@locale@std@@MEAA@XZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Id_cnt@id@locale@std@@0HA ?_Incref@facet@locale@std@@UEAAXXZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA ?_Throw_Cpp_error@std@@YAXH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?id@?$numpunct@D@std@@2V0locale@2@A _Mtx_lock _Mtx_unlock

api-ms-win-core-path-l1-1-0

PathCchCanonicalizeEx

advapi32

GetUserNameA

vcruntime140

_CxxThrowException __C_specific_handler __current_exception __current_exception_context __std_exception_copy __std_exception_destroy memcmp memcpy memmove memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __stdio_common_vfprintf __stdio_common_vsnprintf_s __stdio_common_vsnwprintf_s __stdio_common_vsprintf _fseeki64 _ftelli64 _set_fmode _wfopen_s _wfsopen fclose ferror fflush fopen fopen_s fread fwrite

api-ms-win-crt-math-l1-1-0

__setusermatherr _dsign

api-ms-win-crt-runtime-l1-1-0

_c_exit _cexit _configure_wide_argv _crt_atexit _errno _exit _get_wide_winmain_command_line _initialize_onexit_table _initialize_wide_environment _initterm _initterm_e _register_onexit_function _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type abort exit strerror_s terminate

api-ms-win-crt-string-l1-1-0

_strdup _stricmp iswspace strcat_s strcmp strlen strncpy_s wcscat_s wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode calloc free malloc realloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale localeconv

Name

.text

Size

216KB

Virtual Size

216KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

329KB

Virtual Size

328KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

290B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

114KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

444B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-30_ec3afd08a998edf0cd5feb6cb1bf2957_akira_cobalt-strike_glassworm_satacom

user32

kernel32

version

shell32

ole32

comctl32

gdi32

msvcp140

api-ms-win-core-path-l1-1-0

advapi32

vcruntime140

vcruntime140_1

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic