2026-09-04_8ad3390c2e10db118295e1733886af30_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-04_8ad3390c2e10db118295e1733886af30_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 2.4MB
Sample260905-etzfqstsdw
SHA256 d39f9173c3fd37db85aa8385fe0c9df6aaa0bf5f8d034f12a952138acc262fa7
MD5 8ad3390c2e10db118295e1733886af30
SHA1 43261e84e432e52505a9cd940753df20e9ba17b3
SHA512 d1c14b9c53ca8aa87ff2fcb473dac46e6964bcf2706e9ae7f7f4530bfd2dfac6ebbbd1ac2a6dea3acd84871824aba40e4f537c5a8bbb346afbd3e86dbc55e0c4
SSDEEP 49152:YT3xjBy9vvlvGLrBuQnDDYQ0zRLgpGY9CUqP6B:YwB0UQfYxMFCUKa
TLSH
T119C55C43FA9692ECC169C034C7565233AB71BC8907207BFB16948B313EA2BA05F7D759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-04_8ad3390c2e10db118295e1733886af30_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-09-04_8ad3390c2e10db118295e1733886af30_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 2.4MB

2026-09-04_8ad3390c2e10db118295e1733886af30_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 75671a62d783e25f600419a0d9c7ba81
SHA256 d39f9173c3fd37db85aa8385fe0c9df6aaa0bf5f8d034f12a952138acc262fa7
MD5 8ad3390c2e10db118295e1733886af30
SHA1 43261e84e432e52505a9cd940753df20e9ba17b3
SHA512 d1c14b9c53ca8aa87ff2fcb473dac46e6964bcf2706e9ae7f7f4530bfd2dfac6ebbbd1ac2a6dea3acd84871824aba40e4f537c5a8bbb346afbd3e86dbc55e0c4
SSDEEP 49152:YT3xjBy9vvlvGLrBuQnDDYQ0zRLgpGY9CUqP6B:YwB0UQfYxMFCUKa
TLSH
T119C55C43FA9692ECC169C034C7565233AB71BC8907207BFB16948B313EA2BA05F7D759
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1724192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

private_rust.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

kernel32

QueryPerformanceCounter WriteConsoleW QueryPerformanceFrequency MultiByteToWideChar SetHandleInformation GetConsoleOutputCP GetFullPathNameW CreateFileW SetFileTime SetFileInformationByHandle FindFirstFileExW GetFileInformationByHandle GetFileInformationByHandleEx GetTempPathW DeleteFileW CreateWaitableTimerExW SetWaitableTimer Sleep GetConsoleMode GetStdHandle SetFilePointerEx FindNextFileW WideCharToMultiByte RtlVirtualUnwind ReleaseMutex CreateMutexA lstrlenW FormatMessageW RtlLookupFunctionEntry GetCurrentProcess RtlCaptureContext GetCurrentDirectoryW GetCurrentThreadId GetCurrentThread SetThreadStackGuarantee GetModuleHandleW AddVectoredExceptionHandler HeapReAlloc CreateThread GetCurrentProcessId GetLastError GetModuleFileNameW SetLastError GetCommandLineW LoadLibraryA GetModuleHandleA WaitForSingleObject GetEnvironmentVariableW GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetSystemInfo GetProcAddress GetSystemTimePreciseAsFileTime CloseHandle FindClose HeapFree GetProcessHeap WaitForSingleObjectEx HeapAlloc

ws2_32

WSASocketW WSACleanup getsockname freeaddrinfo getaddrinfo WSAStartup connect closesocket WSAGetLastError bind

ntdll

RtlNtStatusToDosError NtWriteFile NtReadFile

vcruntime140

memcpy __current_exception_context __current_exception __C_specific_handler __CxxFrameHandler3 memmove memset memcmp

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-math-l1-1-0

__setusermatherr log2

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _wassert _set_app_type _configure_narrow_argv _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit terminate

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-04_8ad3390c2e10db118295e1733886af30_akira_cobalt-strike_glassworm_rusty-stealer_satacom

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

ws2_32

ntdll

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic