25a15c8eb10b10cc0bc8a63a43eba93dfcafbd52d433ce6dd756022bc9281aa2 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

2026-09-06...xz.exe

windows10-2004-x64

6

2026-09-06...xz.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-06_36cc616604913fb375f417192f4b265c_akira_cobalt-strike_glassworm_qilin_rusty-stealer_satacom_zxxz
Size 30.8MB
Sample260907-fxhg3axvas
SHA256 25a15c8eb10b10cc0bc8a63a43eba93dfcafbd52d433ce6dd756022bc9281aa2
MD5 36cc616604913fb375f417192f4b265c
SHA1 dc856c1f3fb0f3eecf42888f52304e4dfb396393
SHA512 f92ba5e56ad886ea082c6bf1b50b224ff5de21d3e15595ab99e6043633fde5bf99747f97c3f5bfd8cc129bbb728fce72830c461dfc2c82c84287866ae353d12d
SSDEEP 393216:dkSgG7S2I8VCTBXdt+6J2gW2gHSzpbtg:dkSguS2I8xSM
TLSH
T1D567F951BA5AD968D146C470C2478AF20A313CDA8B3579BF5484BE383F7A7F46E38319
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery execution persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-09-06_36cc616604913fb375f417192f4b265c_akira_cobalt-strike_glassworm_qilin_rusty-stealer_satacom_zxxz.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

150 seconds

defense_evasion discovery execution persistence trojan

Behavioral task

behavioral2

Sample

2026-09-06_36cc616604913fb375f417192f4b265c_akira_cobalt-strike_glassworm_qilin_rusty-stealer_satacom_zxxz.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery execution persistence trojan

Malware Config

Targets

- Target
  2026-09-06_36cc616604913fb375f417192f4b265c_akira_cobalt-strike_glassworm_qilin_rusty-stealer_satacom_zxxz
- Size 30.8MB
- SHA256 25a15c8eb10b10cc0bc8a63a43eba93dfcafbd52d433ce6dd756022bc9281aa2
- MD5 36cc616604913fb375f417192f4b265c
- SHA1 dc856c1f3fb0f3eecf42888f52304e4dfb396393
- SHA512 f92ba5e56ad886ea082c6bf1b50b224ff5de21d3e15595ab99e6043633fde5bf99747f97c3f5bfd8cc129bbb728fce72830c461dfc2c82c84287866ae353d12d
- SSDEEP 393216:dkSgG7S2I8VCTBXdt+6J2gW2gHSzpbtg:dkSguS2I8xSM
- TLSH
  T1D567F951BA5AD968D146C470C2478AF20A313CDA8B3579BF5484BE383F7A7F46E38319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution persistence trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistencetrojan

behavioral2

defense_evasiondiscoveryexecutionpersistencetrojan

© 2018-2026

Terms | Privacy