General
- Target 2026-09-04_453c599434f9ff6dcc3a99fd63321127_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 4.8MB
- Sample260905-pphbrsvbpd
- SHA256 e3f9503a9dc1f58c64da309caae178fd7560ddd59ad28f71b03106f1cb5a5ea0
- MD5 453c599434f9ff6dcc3a99fd63321127
- SHA1 81f42a486c733bebd9fac4fca2d72dd0148d9894
- SHA512 e769362f188a4d00789dd042921925ae1738d139cc4ef6af112f92eab121e0fa3c3b3edbb2dfd4613b6d5733e07d4cbf811d3fe57b3272f372cb1a21160a7651
- SSDEEP 49152:pkFCyvy7M/C/XSCbnB7hhqmqnAXyxKuTUbVZnVbvj6Sffq+i2QylXhNqAY60j7Yd:m9ASCbdqMtzQylxu6P57Agn+
- TLSH T186365C43F26181E9C06EC078D35AA233FB3278890A2476EB5BD45B312F66F906F1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_453c599434f9ff6dcc3a99fd63321127_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_453c599434f9ff6dcc3a99fd63321127_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_453c599434f9ff6dcc3a99fd63321127_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 4.8MB
- SHA256 e3f9503a9dc1f58c64da309caae178fd7560ddd59ad28f71b03106f1cb5a5ea0
- MD5 453c599434f9ff6dcc3a99fd63321127
- SHA1 81f42a486c733bebd9fac4fca2d72dd0148d9894
- SHA512 e769362f188a4d00789dd042921925ae1738d139cc4ef6af112f92eab121e0fa3c3b3edbb2dfd4613b6d5733e07d4cbf811d3fe57b3272f372cb1a21160a7651
- SSDEEP 49152:pkFCyvy7M/C/XSCbnB7hhqmqnAXyxKuTUbVZnVbvj6Sffq+i2QylXhNqAY60j7Yd:m9ASCbdqMtzQylxu6P57Agn+
- TLSH T186365C43F26181E9C06EC078D35AA233FB3278890A2476EB5BD45B312F66F906F1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Checks whether UAC is enabled
-
Suspicious use of SetThreadContext