General
- Target 2026-09-08_070e2d537f2429946f6138c9cd74e48b_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 3.5MB
- Sample260910-jmvw7asybw
- SHA256 5cb43d6ac695a237d1bc1a38146a8b5f5b89ea47ed5c665051870e4a4670f841
- MD5 070e2d537f2429946f6138c9cd74e48b
- SHA1 251c2ea109647fa14eff61990d3d4d88d8e11947
- SHA512 43efa23d752296358430c2d185d62c340cdcd8a8719f19de5d554496b023b3fbe1f54b33c9a47c9df246d7cca10474c3d9fc34a1492dfa8f066893ae93894305
- SSDEEP 49152:pOm2Z6iDW3N8cOBHuJaTt28YfFuoDAZaA4EAu15CZ9Wyn9i1q9She/0XxiOGJmlW:pOdWKT0JAar8MQirP/5Sih
- TLSH T11BF57C43FB9981E9C09EC178831B9733EB32B88D1621B39B67948A213F67B605F5D354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-08_070e2d537f2429946f6138c9cd74e48b_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_070e2d537f2429946f6138c9cd74e48b_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_070e2d537f2429946f6138c9cd74e48b_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 3.5MB
- SHA256 5cb43d6ac695a237d1bc1a38146a8b5f5b89ea47ed5c665051870e4a4670f841
- MD5 070e2d537f2429946f6138c9cd74e48b
- SHA1 251c2ea109647fa14eff61990d3d4d88d8e11947
- SHA512 43efa23d752296358430c2d185d62c340cdcd8a8719f19de5d554496b023b3fbe1f54b33c9a47c9df246d7cca10474c3d9fc34a1492dfa8f066893ae93894305
- SSDEEP 49152:pOm2Z6iDW3N8cOBHuJaTt28YfFuoDAZaA4EAu15CZ9Wyn9i1q9She/0XxiOGJmlW:pOdWKT0JAar8MQirP/5Sih
- TLSH T11BF57C43FB9981E9C09EC178831B9733EB32B88D1621B39B67948A213F67B605F5D354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE