3a2e1c1a659193582da77b1776e9109c9a4668083fd3d0e05fb7f9aab52e9942

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/09/2026, 23:25

Target
2026-09-05_4dfc0eaeb354d98502996f71a180b2aa_akira_cobalt-strike_rusty-stealer_satacom.exe
Size 3.1MB
Sample260907-3erpcawsd1
SHA256 3a2e1c1a659193582da77b1776e9109c9a4668083fd3d0e05fb7f9aab52e9942
MD5 4dfc0eaeb354d98502996f71a180b2aa
SHA1 a0d1f54c783a0087b28a2985f772c59e11431de1
SHA512 d4c7639f4aee5a78f1d824a9384f5048b44712e6bae3000849323f1ce286c712817a962c99699432c8c654160702fb8315b096904e4bb14b7d840e7cb5db1b01
SSDEEP 49152:lRKGnYF8hNatOJBmuZNPP9bVrfKJeq0J1U0:l04hNzB7xbU0
TLSH
T125E5AD03F346C6EDD10AD0B48755A223DA63F4454736A2FF7BC81E20AE56AA08F1D75E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2332	2026-09-05_4dfc0eaeb354d98502996f71a180b2aa_akira_cobalt-strike_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-05_4dfc0eaeb354d98502996f71a180b2aa_akira_cobalt-strike_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-05_4dfc0eaeb354d98502996f71a180b2aa_akira_cobalt-strike_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:2332