Analysis
- max time kernel
149s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
13/09/2026, 17:14
General
- Target 2026-09-13_1edc5b901710c7eef4a15b133069e5a1_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe
- Size 18.9MB
- Sample260913-vsbahsar7s
- SHA256 3655ebce94e5c67ae0a4f5730e29d100f462dd5db0888081d7faca19adeade84
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-13_1edc5b901710c7eef4a15b133069e5a1_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-13_1edc5b901710c7eef4a15b133069e5a1_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004E0 0x00000000000004D01⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4696-2-0x0000014ACF3E0000-0x0000014ACF3E1000-memory.dmp
memory/4696-0-0x0000014ACF3E0000-0x0000014ACF3E1000-memory.dmp