8b37f42acf7edfb3a81f320f0fce434900843986b7314a75e6e473af780f3b34

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 15:56

Target
2026-08-31_ac6f2a7621debae139870687947742f2_akira_cobalt-strike_rusty-stealer_satacom.exe
Size 3.7MB
Sample260831-tdmvbscm81
SHA256 8b37f42acf7edfb3a81f320f0fce434900843986b7314a75e6e473af780f3b34
MD5 ac6f2a7621debae139870687947742f2
SHA1 ecd81bfe083d3ea719c76b980f4242bec1944b13
SHA512 78205809b158b20c69a87a820f7fd3ea260763dfd9a54bb7a5e3d88e07ada6b79136df9a6fc41802c9d0198759fde9ba9f62fb4b4980010900a2e2f039433791
SSDEEP 49152:NlwKrEhGZy3K9U4N+Q5SRE9qx6qU6yEjgmiT9b8KJeLrm0ku+zs:w6ETnwoG4x6qUb2gThbpzs
TLSH
T11206AF03F382CBEDC50AC575965291339AA7F809073EA6BF77881E10B956EA08F1C75D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2496	2026-08-31_ac6f2a7621debae139870687947742f2_akira_cobalt-strike_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-31_ac6f2a7621debae139870687947742f2_akira_cobalt-strike_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-31_ac6f2a7621debae139870687947742f2_akira_cobalt-strike_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:2496