General
- Target 2026-09-13_510df1f1b7cf8bc498a61f32cd04b0c6_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom
- Size 2.0MB
- Sample260913-sqrtdayejc
- SHA256 31c2411cc5114fcc89a33c9786fc07b9de5f08c1919d5942615ac436649acdb2
- MD5 510df1f1b7cf8bc498a61f32cd04b0c6
- SHA1 1f561e6e76e70165872130eae3bed408cc08b06c
- SHA512 67acd2bf02e1976ca7be94fcf431277fe141a6c7b9531e7233903515b701384d73d3296443a86010869fd2c5ceec0e622993f6a23735523132b266b3c3a87282
- SSDEEP 24576:ItZ1I+cT9bRQfFWRlT0L7p+kkvbCB0qcA6v2xLAS3lFfXiAHzFZgMMv:ItZyFyp+7Y76v4LPXiGvM
- TLSH T153957B43F66694F9D56AC07887466233BA32B88E07317AFB66D447343E26FD02A3C715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_510df1f1b7cf8bc498a61f32cd04b0c6_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_510df1f1b7cf8bc498a61f32cd04b0c6_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_510df1f1b7cf8bc498a61f32cd04b0c6_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom
- Size 2.0MB
- SHA256 31c2411cc5114fcc89a33c9786fc07b9de5f08c1919d5942615ac436649acdb2
- MD5 510df1f1b7cf8bc498a61f32cd04b0c6
- SHA1 1f561e6e76e70165872130eae3bed408cc08b06c
- SHA512 67acd2bf02e1976ca7be94fcf431277fe141a6c7b9531e7233903515b701384d73d3296443a86010869fd2c5ceec0e622993f6a23735523132b266b3c3a87282
- SSDEEP 24576:ItZ1I+cT9bRQfFWRlT0L7p+kkvbCB0qcA6v2xLAS3lFfXiAHzFZgMMv:ItZyFyp+7Y76v4LPXiGvM
- TLSH T153957B43F66694F9D56AC07887466233BA32B88E07317AFB66D447343E26FD02A3C715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.