2026-09-04_453c599434f9ff6dcc3a99fd63321127_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-04_453c599434f9ff6dcc3a99fd63321127_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 4.8MB
Sample260905-pphbrsvbpd
SHA256 e3f9503a9dc1f58c64da309caae178fd7560ddd59ad28f71b03106f1cb5a5ea0
MD5 453c599434f9ff6dcc3a99fd63321127
SHA1 81f42a486c733bebd9fac4fca2d72dd0148d9894
SHA512 e769362f188a4d00789dd042921925ae1738d139cc4ef6af112f92eab121e0fa3c3b3edbb2dfd4613b6d5733e07d4cbf811d3fe57b3272f372cb1a21160a7651
SSDEEP 49152:pkFCyvy7M/C/XSCbnB7hhqmqnAXyxKuTUbVZnVbvj6Sffq+i2QylXhNqAY60j7Yd:m9ASCbdqMtzQylxu6P57Agn+
TLSH
T186365C43F26181E9C06EC078D35AA233FB3278890A2476EB5BD45B312F66F906F1D759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-04_453c599434f9ff6dcc3a99fd63321127_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-09-04_453c599434f9ff6dcc3a99fd63321127_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 4.8MB

2026-09-04_453c599434f9ff6dcc3a99fd63321127_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH c56093942273270cbb6f1e962149b6aa
SHA256 e3f9503a9dc1f58c64da309caae178fd7560ddd59ad28f71b03106f1cb5a5ea0
MD5 453c599434f9ff6dcc3a99fd63321127
SHA1 81f42a486c733bebd9fac4fca2d72dd0148d9894
SHA512 e769362f188a4d00789dd042921925ae1738d139cc4ef6af112f92eab121e0fa3c3b3edbb2dfd4613b6d5733e07d4cbf811d3fe57b3272f372cb1a21160a7651
SSDEEP 49152:pkFCyvy7M/C/XSCbnB7hhqmqnAXyxKuTUbVZnVbvj6Sffq+i2QylXhNqAY60j7Yd:m9ASCbdqMtzQylxu6P57Agn+
TLSH
T186365C43F26181E9C06EC078D35AA233FB3278890A2476EB5BD45B312F66F906F1D759
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5016576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcryptprimitives

ProcessPrng

ntdll

NtOpenFile RtlGetVersion RtlNtStatusToDosError NtCreateFile NtCreateNamedPipeFile NtCancelIoFileEx NtDeviceIoControlFile NtWriteFile NtReadFile

user32

TrackMouseEvent GetTouchInputInfo SetCapture ScreenToClient DispatchMessageW GetKeyState GetAsyncKeyState UpdateWindow PostThreadMessageW PeekMessageW InvalidateRect SetCursorPos SetCursor LoadCursorW GetForegroundWindow FlashWindowEx TranslateMessage RegisterTouchWindow IsWindow IsWindowEnabled IsIconic EnableWindow SetPropW GetMessageW MonitorFromRect SystemParametersInfoW GetWindowLongPtrW MsgWaitForMultipleObjectsEx EnumWindows ClipCursor GetRawInputData ValidateRect GetUpdateRect MapVirtualKeyW GetSystemMetrics GetClipCursor ShowCursor DefWindowProcW RegisterRawInputDevices SetWindowTextW GetWindowTextLengthW SetWindowDisplayAffinity ReleaseCapture ToUnicodeEx PostMessageW MapVirtualKeyExW GetKeyboardState RedrawWindow AdjustWindowRect GetMonitorInfoW FindWindowExW GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW GetParent AdjustWindowRectEx GetMenu GetWindowLongW SetWindowLongW GetSystemMenu InvalidateRgn RegisterWindowMessageA IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow SetWindowRgn ClientToScreen GetCursorPos SendInput DrawTextW FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo PostQuitMessage ShowWindow SendMessageW SystemParametersInfoA GetActiveWindow SetMenu CreateIcon RemoveMenu CheckMenuItem DrawMenuBar EnableMenuItem CreatePopupMenu CreateMenu DrawIconEx ReleaseDC GetDC SetMenuItemInfoW AppendMenuW InsertMenuW CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu EnumDisplayMonitors MonitorFromPoint GetWindowTextW IsWindowVisible SetWindowsHookExW GetWindowThreadProcessId FindWindowA SetWindowLongPtrW EnumChildWindows DispatchMessageA GetMessageA SetWindowPos CreateWindowExW RegisterClassExW GetWindow GetMenuItemInfoW TranslateAcceleratorW SetFocus DestroyWindow SetParent GetKeyboardLayout CloseTouchInputHandle

kernel32

AcquireSRWLockExclusive WakeAllConditionVariable FreeLibrary SleepConditionVariableSRW GetSystemTimeAsFileTime TerminateProcess OpenProcess CheckRemoteDebuggerPresent GetCurrentProcess IsDebuggerPresent RtlPcToFileHeader RaiseException GetCurrentThreadId FlsAlloc ReleaseSRWLockExclusive LoadLibraryExW CloseHandle SwitchToThread GetProcAddress LoadLibraryA GetSystemTimePreciseAsFileTime SetLastError FlsGetValue FlsSetValue FlsFree HeapFree WaitForSingleObject LoadLibraryW Sleep GetModuleHandleA GetProcessHeap RtlLookupFunctionEntry WaitForSingleObjectEx GetCurrentProcessId WideCharToMultiByte ReleaseMutex MultiByteToWideChar HeapAlloc HeapReAlloc SleepEx FormatMessageW SetHandleInformation ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW GetModuleFileNameW DuplicateHandle WaitForMultipleObjects SetWaitableTimer SetThreadStackGuarantee GetModuleHandleW SetUnhandledExceptionFilter lstrlenW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter QueryPerformanceFrequency GetEnvironmentVariableW GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext RtlUnwindEx GetLastError AddVectoredExceptionHandler Thread32Next Thread32First CreateFileMappingA GetCommandLineW SetEnvironmentVariableW InitializeCriticalSectionEx Process32NextW Process32FirstW CreateToolhelp32Snapshot PostQueuedCompletionStatus CreateWaitableTimerExW DeleteFileW GetTempPathW GetFileAttributesW CreateProcessW ReadFile GetOverlappedResult CancelIo CreateEventW GetUserDefaultUILanguage CreateDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle SetFileInformationByHandle SetFileTime GetFullPathNameW CreateThread WriteFileEx ReadFileEx WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle DeleteCriticalSection CreateMutexA SetFileCompletionNotificationModes CreateIoCompletionPort LCIDToLocaleName GetQueuedCompletionStatusEx GetFinalPathNameByHandleW UnmapViewOfFile GetExitCodeProcess GetSystemInfo GetVolumeInformationA FindNextFileW FindFirstFileExW LoadLibraryExA GetDiskFreeSpaceExW CreateFileW FindClose InitializeSListHead MapViewOfFile OutputDebugStringA OutputDebugStringW EncodePointer GetCurrentThread

comctl32

SetWindowSubclass RemoveWindowSubclass DefSubclassProc TaskDialogIndirect

oleaut32

SysFreeString SetErrorInfo SysStringLen GetErrorInfo

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

dwmapi

DwmGetWindowAttribute DwmSetWindowAttribute DwmEnableBlurBehindWindow

shlwapi

SHCreateMemStream

ole32

OleInitialize CoCreateInstance CoTaskMemAlloc CoUninitialize CoCreateFreeThreadedMarshaler CoInitializeEx CoTaskMemFree RegisterDragDrop RevokeDragDrop

shell32

ShellExecuteW DragFinish DragQueryFileW SHAppBarMessage SHGetKnownFolderPath

gdi32

CombineRgn CreateDIBSection CreateRectRgn CreateCompatibleDC SetBkMode DeleteDC BitBlt GetDeviceCaps CreateSolidBrush DeleteObject SelectObject SetTextColor

ws2_32

send recv freeaddrinfo getaddrinfo WSACleanup WSAStartup bind getsockopt shutdown setsockopt ioctlsocket WSASocketW WSASend closesocket WSAIoctl getsockname WSAGetLastError getpeername connect

advapi32

RegCloseKey RegGetValueW RegOpenKeyExW RegQueryValueExW RegDeleteValueW RegCreateKeyExW RegSetValueExW EventUnregister SystemFunction036 EventSetInformation EventRegister EventWriteTransfer

bcrypt

BCryptGenRandom

api-ms-win-crt-string-l1-1-0

strcpy_s wcscmp _wcsicmp strlen wcslen

api-ms-win-crt-math-l1-1-0

roundf trunc pow round __setusermatherr floor

api-ms-win-crt-convert-l1-1-0

_ultow_s _wtoi wcstol

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initterm _initterm_e exit _exit _configure_narrow_argv _set_app_type _seh_filter_exe terminate _register_onexit_function _initialize_narrow_environment __p___argc __p___argv abort _register_thread_local_exe_atexit_callback _c_exit _initialize_onexit_table _cexit _crt_atexit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free _set_new_mode calloc

Name

.text

Size

3.3MB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

76KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

56KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-04_453c599434f9ff6dcc3a99fd63321127_akira_cobalt-strike_glassworm_rusty-stealer_satacom

bcryptprimitives

ntdll

user32

kernel32

comctl32

oleaut32

api-ms-win-core-synch-l1-2-0

dwmapi

shlwapi

ole32

shell32

gdi32

ws2_32

advapi32

bcrypt

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic