2026-09-07_f151030a91ccd98613dc0b5700bec73d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-07_f151030a91ccd98613dc0b5700bec73d_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 10.1MB
Sample260908-b39fhsxzhy
SHA256 15ea45013ce081ffebd91f45c73f5d2e87c4a3de178e7aec61c1d91dec10e26d
MD5 f151030a91ccd98613dc0b5700bec73d
SHA1 ae24c5858c9c60b78ddc3ef89cff52d737d07ba6
SHA512 ee711282b46b64cb21c3d287d301563a8ccb11e59833582029bf60231376db7d84d5dc9963afbc84f05be42181da32a81b0a3504d22a902149a79f1dd494eceb
SSDEEP 98304:YldFqEFawzC8KobGBbI/TYOrqcBtGLA0wD3nbRon+U:kFqCaPE69ILYOecbGLlw0N
TLSH
T1BBB66D03F26181E8C06EC1B5835AA637FB72B88A0934B2EF57D45B212F66F506F1D749
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-07_f151030a91ccd98613dc0b5700bec73d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-09-07_f151030a91ccd98613dc0b5700bec73d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 10.1MB

2026-09-07_f151030a91ccd98613dc0b5700bec73d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 9734214d8a0f80b8b95f32c829dcbd2d
SHA256 15ea45013ce081ffebd91f45c73f5d2e87c4a3de178e7aec61c1d91dec10e26d
MD5 f151030a91ccd98613dc0b5700bec73d
SHA1 ae24c5858c9c60b78ddc3ef89cff52d737d07ba6
SHA512 ee711282b46b64cb21c3d287d301563a8ccb11e59833582029bf60231376db7d84d5dc9963afbc84f05be42181da32a81b0a3504d22a902149a79f1dd494eceb
SSDEEP 98304:YldFqEFawzC8KobGBbI/TYOrqcBtGLA0wD3nbRon+U:kFqCaPE69ILYOecbGLlw0N
TLSH
T1BBB66D03F26181E8C06EC1B5835AA637FB72B88A0934B2EF57D45B212F66F506F1D749
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3372784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

nexusclicker_setup.pdb

bcryptprimitives

ProcessPrng

ntdll

RtlNtStatusToDosError RtlGetVersion NtWriteFile NtCancelIoFileEx NtOpenFile NtCreateFile NtDeviceIoControlFile NtCreateNamedPipeFile

kernel32

GetSystemTimeAsFileTime SleepConditionVariableSRW WakeAllConditionVariable RtlPcToFileHeader AcquireSRWLockExclusive RaiseException FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer InitializeSListHead SetUnhandledExceptionFilter RtlUnwindEx SwitchToThread SetLastError lstrlenW HeapReAlloc HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee GetSystemTimePreciseAsFileTime GetUserDefaultUILanguage RtlLookupFunctionEntry WaitForSingleObjectEx GetCurrentProcess GetCurrentProcessId WideCharToMultiByte ReleaseMutex WaitForSingleObject MultiByteToWideChar HeapAlloc SleepEx FormatMessageW SetHandleInformation ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW GetModuleFileNameW DuplicateHandle GetModuleHandleW SetWaitableTimer FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter QueryPerformanceFrequency GetEnvironmentVariableW GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext GetCommandLineW SetEnvironmentVariableW GetUserGeoID GetModuleHandleA AddVectoredExceptionHandler CreateWaitableTimerExW DeleteFileW GetTempPathW GetFileAttributesW CreateProcessW CreateDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle SetFileInformationByHandle SetFileTime GetFullPathNameW CreateThread WriteFileEx ReadFileEx WriteConsoleW GetConsoleOutputCP GetConsoleMode Sleep GetStdHandle CreateMutexA SetNamedPipeHandleState CreateFileW FindClose FindNextFileW FindFirstFileExW ReleaseSRWLockExclusive CancelIoEx WriteFile SetFileCompletionNotificationModes CreateIoCompletionPort GetOverlappedResult ReadFile PostQueuedCompletionStatus GetQueuedCompletionStatusEx GetFinalPathNameByHandleW DeleteCriticalSection GetProcAddress LoadLibraryA LCIDToLocaleName CloseHandle GetLastError FreeLibrary GetExitCodeProcess InitializeCriticalSectionEx LoadLibraryW GetCurrentThreadId GetSystemInfo LoadLibraryExW OutputDebugStringW OutputDebugStringA LoadLibraryExA

shell32

ShellExecuteW SHCreateItemFromParsingName DragQueryFileW DragFinish SHAppBarMessage SHGetKnownFolderPath

ole32

CoCreateFreeThreadedMarshaler CoTaskMemFree RegisterDragDrop RevokeDragDrop CoInitializeEx CoTaskMemAlloc CoCreateInstance OleInitialize CoUninitialize

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

comctl32

RemoveWindowSubclass SetWindowSubclass DefSubclassProc TaskDialogIndirect

user32

LoadCursorW FlashWindowEx SetCapture RegisterTouchWindow IsWindow IsWindowEnabled GetTouchInputInfo DestroyMenu DestroyIcon DestroyAcceleratorTable CreateAcceleratorTableW InsertMenuW IsIconic IsWindowVisible AppendMenuW SetMenuItemInfoW EnableWindow SetPropW MonitorFromRect SystemParametersInfoW CloseTouchInputHandle GetForegroundWindow ClipCursor GetSystemMetrics VkKeyScanW GetDC GetClipCursor TrackMouseEvent DefWindowProcW RegisterRawInputDevices SetWindowTextW GetWindowTextW GetWindowTextLengthW SetCursor ReleaseCapture SetCursorPos ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW ReleaseDC DrawIconEx CreateMenu CreatePopupMenu DrawMenuBar GetMenuItemInfoW GetKeyboardState InvalidateRect UpdateWindow GetMonitorInfoW GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW AdjustWindowRectEx GetMenu GetWindowLongW SetWindowLongW GetSystemMenu InvalidateRgn RegisterWindowMessageA ScreenToClient TranslateAcceleratorW SetWindowLongPtrW FindWindowExW GetParent SetWindowRgn GetAsyncKeyState MapVirtualKeyW GetUpdateRect ValidateRect GetRawInputData MsgWaitForMultipleObjectsEx DispatchMessageW GetMessageW PeekMessageW PostThreadMessageW DestroyWindow SetWindowDisplayAffinity SetParent SetFocus EnumChildWindows DispatchMessageA TranslateMessage GetMessageA SetWindowPos CreateWindowExW RegisterClassExW GetWindow GetWindowLongPtrW ShowCursor RedrawWindow AdjustWindowRect EnumDisplayMonitors MonitorFromPoint IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos SendInput DrawTextW FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo ShowWindow SendMessageW PostQuitMessage SystemParametersInfoA PostMessageW GetActiveWindow SetMenu CreateIcon RemoveMenu CheckMenuItem EnableMenuItem GetKeyState

gdi32

GetDeviceCaps BitBlt SetTextColor SetBkMode CreateRectRgn CombineRgn CreateCompatibleDC DeleteObject CreateSolidBrush CreateDIBSection SelectObject DeleteDC

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute DwmGetWindowAttribute

oleaut32

SetErrorInfo SysFreeString SysStringLen GetErrorInfo

shlwapi

SHCreateMemStream

advapi32

EventRegister EventUnregister RegOpenKeyExW RegQueryValueExW RegSetValueExW EventWriteTransfer EventSetInformation RegGetValueW RegCreateKeyExW SystemFunction036 RegCloseKey

ws2_32

shutdown send freeaddrinfo getaddrinfo WSACleanup WSAStartup setsockopt bind WSASend connect ioctlsocket WSASocketW recv closesocket WSAIoctl getsockname WSAGetLastError getpeername getsockopt

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

floor round pow trunc __setusermatherr roundf

api-ms-win-crt-string-l1-1-0

strcpy_s _wcsicmp wcslen wcscmp

api-ms-win-crt-convert-l1-1-0

_wtoi _ultow_s wcstol

api-ms-win-crt-runtime-l1-1-0

_set_app_type _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _crt_atexit exit _exit __p___argv _cexit _register_onexit_function __p___argc terminate _initialize_onexit_table _c_exit _seh_filter_exe abort _register_thread_local_exe_atexit_callback _initterm_e

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free _callnewh malloc calloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-07_f151030a91ccd98613dc0b5700bec73d_akira_cobalt-strike_glassworm_rusty-stealer_satacom

bcryptprimitives

ntdll

kernel32

shell32

ole32

api-ms-win-core-synch-l1-2-0

comctl32

user32

gdi32

dwmapi

oleaut32

shlwapi

advapi32

ws2_32

bcrypt

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic