2026-09-11_678baf6b6fd6b5f1b58700c42cce7488_akira_cobalt-strike_glassworm_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-11_678baf6b6fd6b5f1b58700c42cce7488_akira_cobalt-strike_glassworm_satacom
Size 5.6MB
Sample260912-ldbhasgh45
SHA256 d2f367f3d9d4529250fb1c2d22d310904c8b0389a3339d084724b7cbf466b4eb
MD5 678baf6b6fd6b5f1b58700c42cce7488
SHA1 387c63f9073e0d5aa26887a3a19c1832a69c4060
SHA512 e4409ae8d0996bf622a27c63e961300c6caf788bf5b3a94ccbd8d1729d64c165b1810192f4aa20a34963b9a0efe102d8d476e417530f56c175f5958d60b96c4f
SSDEEP 49152:1mqXr6vOBz/i+YkSx+VBT7kmT3BFWkfzlmy3K2576aaGjMUvqoelDe20N++LKcRt:97vKLWhoCv/CfDRk
TLSH
T1E546D71AA76D64DAC17FC078D2839F22B921349D473977F7898082692F24EF8AD3D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-11_678baf6b6fd6b5f1b58700c42cce7488_akira_cobalt-strike_glassworm_satacom

File Explorer

2026-09-11_678baf6b6fd6b5f1b58700c42cce7488_akira_cobalt-strike_glassworm_satacom

.exe 5.6MB

2026-09-11_678baf6b6fd6b5f1b58700c42cce7488_akira_cobalt-strike_glassworm_satacom

IMPHASH edb82636fffa7ebf56902d4d3dadc002
SHA256 d2f367f3d9d4529250fb1c2d22d310904c8b0389a3339d084724b7cbf466b4eb
MD5 678baf6b6fd6b5f1b58700c42cce7488
SHA1 387c63f9073e0d5aa26887a3a19c1832a69c4060
SHA512 e4409ae8d0996bf622a27c63e961300c6caf788bf5b3a94ccbd8d1729d64c165b1810192f4aa20a34963b9a0efe102d8d476e417530f56c175f5958d60b96c4f
SSDEEP 49152:1mqXr6vOBz/i+YkSx+VBT7kmT3BFWkfzlmy3K2576aaGjMUvqoelDe20N++LKcRt:97vKLWhoCv/CfDRk
TLSH
T1E546D71AA76D64DAC17FC078D2839F22B921349D473977F7898082692F24EF8AD3D354
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4138848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Admin\Desktop\rus\target\debug\deps\rus.pdb

kernel32

GetSystemInfo CreateIoCompletionPort GetQueuedCompletionStatusEx PostQueuedCompletionStatus DuplicateHandle GetCurrentProcess UnregisterWaitEx RegisterWaitForSingleObject SetFileCompletionNotificationModes GetLastError Sleep GetModuleHandleA GetProcAddress ReleaseSRWLockExclusive AcquireSRWLockExclusive FreeEnvironmentStringsW DeleteProcThreadAttributeList CompareStringOrdinal AddVectoredExceptionHandler SetThreadStackGuarantee SwitchToThread WaitForSingleObject QueryPerformanceCounter RtlCaptureContext RtlVirtualUnwind RtlLookupFunctionEntry SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW ReleaseSRWLockShared CloseHandle AcquireSRWLockShared SetFileInformationByHandle SetFilePointerEx TryAcquireSRWLockExclusive GetStdHandle GetCurrentProcessId WriteFileEx SleepEx GetExitCodeProcess TerminateProcess QueryPerformanceFrequency HeapAlloc GetProcessHeap HeapFree GetCurrentThreadId HeapReAlloc ReleaseMutex FindClose CreateFileW GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW FindFirstFileW GetFinalPathNameByHandleW InitializeSListHead IsDebuggerPresent GetConsoleMode UnhandledExceptionFilter GetModuleHandleW FormatMessageW GetModuleFileNameW GetFullPathNameW CreateNamedPipeW ReadFileEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW InitializeProcThreadAttributeList UpdateProcThreadAttribute SetUnhandledExceptionFilter MultiByteToWideChar WriteConsoleW CreateThread GetCurrentThread GetSystemTimeAsFileTime GetTempPathW WaitForSingleObjectEx LoadLibraryA CreateMutexA SetHandleInformation IsProcessorFeaturePresent

advapi32

RegOpenKeyExW RegQueryValueExW SystemFunction036 RegCloseKey

secur32

AcceptSecurityContext FreeContextBuffer DecryptMessage EncryptMessage ApplyControlToken AcquireCredentialsHandleA InitializeSecurityContextW FreeCredentialsHandle DeleteSecurityContext QueryContextAttributesW

crypt32

CertVerifyCertificateChainPolicy CertDuplicateCertificateChain CertFreeCertificateChain CertCloseStore CertDuplicateStore CertGetCertificateChain CertDuplicateCertificateContext CertFreeCertificateContext CertEnumCertificatesInStore CertOpenStore CertAddCertificateContextToStore

ws2_32

WSASend getsockopt setsockopt shutdown getpeername getsockname connect bind WSASocketW closesocket ioctlsocket WSAGetLastError WSAIoctl getaddrinfo freeaddrinfo WSAStartup WSACleanup recv send

ntdll

NtDeviceIoControlFile RtlNtStatusToDosError NtCreateFile NtWriteFile NtReadFile NtCancelIoFileEx

bcrypt

BCryptGenRandom

vcruntime140

memmove memcpy __CxxFrameHandler3 __current_exception_context __current_exception memset __C_specific_handler memcmp _CxxThrowException

api-ms-win-crt-math-l1-1-0

__setusermatherr pow

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _c_exit exit _register_thread_local_exe_atexit_callback _initterm_e _exit _initterm _initialize_onexit_table _register_onexit_function _crt_atexit terminate _get_initial_narrow_environment _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-11_678baf6b6fd6b5f1b58700c42cce7488_akira_cobalt-strike_glassworm_satacom

kernel32

advapi32

secur32

crypt32

ws2_32

ntdll

bcrypt

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic