2026-09-13_1edc5b901710c7eef4a15b133069e5a1_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-13_1edc5b901710c7eef4a15b133069e5a1_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom
Size 18.9MB
Sample260913-vsbahsar7s
SHA256 3655ebce94e5c67ae0a4f5730e29d100f462dd5db0888081d7faca19adeade84
MD5 1edc5b901710c7eef4a15b133069e5a1
SHA1 3723aa415bbc7dee1b23c66d01ecf6a19193683f
SHA512 ab6ba0247e73d2c0cec6dc10f49dd132c01cf7106bf65a5b0a299e1e3fcb348649d6dae6d9f812c945f8fbd78b997e0013d0b7317e3306c66b19169421019873
SSDEEP 98304:Bc6iFbzyHK07IIB1xmkqmxPWsU0bdBepr4nqlV7KNUwOua2IcXY3AREZha8zx6av:v3mkYQaTSqAR8dAsSI95QExnr
TLSH
T181176C41B65B95ADE16AC870830A8A739E3174CB0736B9FF51D482343F6ABE05B3C719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-13_1edc5b901710c7eef4a15b133069e5a1_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

File Explorer

2026-09-13_1edc5b901710c7eef4a15b133069e5a1_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

.exe 18.9MB

2026-09-13_1edc5b901710c7eef4a15b133069e5a1_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

IMPHASH ef8490e9dd3a3df354985db1eabed34a
SHA256 3655ebce94e5c67ae0a4f5730e29d100f462dd5db0888081d7faca19adeade84
MD5 1edc5b901710c7eef4a15b133069e5a1
SHA1 3723aa415bbc7dee1b23c66d01ecf6a19193683f
SHA512 ab6ba0247e73d2c0cec6dc10f49dd132c01cf7106bf65a5b0a299e1e3fcb348649d6dae6d9f812c945f8fbd78b997e0013d0b7317e3306c66b19169421019873
SSDEEP 98304:Bc6iFbzyHK07IIB1xmkqmxPWsU0bdBepr4nqlV7KNUwOua2IcXY3AREZha8zx6av:v3mkYQaTSqAR8dAsSI95QExnr
TLSH
T181176C41B65B95ADE16AC870830A8A739E3174CB0736B9FF51D482343F6ABE05B3C719
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13352736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rpgm_viewer.pdb

bcryptprimitives

ProcessPrng

kernel32

CreateWaitableTimerExW SetWaitableTimer QueryPerformanceCounter GetModuleHandleW QueryPerformanceFrequency RtlVirtualUnwind ReleaseMutex CreateMutexA GetCurrentProcessId LoadLibraryA WaitForSingleObjectEx RtlLookupFunctionEntry GetCurrentProcess RtlCaptureContext GetModuleHandleA Sleep FormatMessageW CreateThread ExitProcess RemoveVectoredExceptionHandler GetCurrentThreadId SetEvent LoadLibraryExA WaitForSingleObject WaitForMultipleObjectsEx SetThreadPriority CreateEventA GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler LoadLibraryExW SetThreadErrorMode GetProcAddress FindNextFileW GetProcessHeap HeapFree HeapAlloc DeleteFileW GetFileInformationByHandle FindFirstFileExW SetFileTime GetFullPathNameW WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle SetLastError SetFileInformationByHandle GetFileInformationByHandleEx FindClose GetSystemInfo GlobalFree SetFilePointerEx GetSystemTimeAsFileTime InitializeSListHead GetSystemTimePreciseAsFileTime FreeLibrary GetLastError CloseHandle SetUnhandledExceptionFilter GetTimeZoneInformationForYear SwitchToThread GlobalLock CreateDirectoryW CreateFileW GetEnvironmentVariableW lstrlenW GetCurrentDirectoryW WideCharToMultiByte GlobalSize MultiByteToWideChar GlobalUnlock HeapReAlloc GlobalAlloc

oleaut32

GetErrorInfo SetErrorInfo SysFreeString SysStringLen

ole32

CoInitializeEx CoUninitialize OleInitialize RegisterDragDrop PropVariantClear CoCreateInstance RevokeDragDrop

user32

RedrawWindow RegisterClassExW GetDC ReleaseDC MonitorFromPoint GetMonitorInfoW EnumDisplayMonitors CreateIconIndirect GetClassInfoExA GetRawInputData MsgWaitForMultipleObjectsEx InvalidateRgn ClientToScreen ToUnicodeEx AdjustWindowRectEx GetWindowLongW ShowCursor ClipCursor MonitorFromWindow TrackMouseEvent SetCapture GetMenu GetKeyboardLayout MapVirtualKeyExW IsProcessDPIAware RegisterClassExA GetAsyncKeyState GetKeyboardState DefWindowProcW ReleaseCapture GetCursorPos SetWindowLongW EnableMenuItem GetSystemMenu ShowWindow RegisterWindowMessageA GetDisplayConfigBufferSizes ValidateRect QueryDisplayConfig DefWindowProcA CreateWindowExA GetClipCursor LoadCursorW SetCursor DestroyCursor SetWindowPlacement GetWindowPlacement GetForegroundWindow FlashWindowEx SetCursorPos SetWindowTextW SetWindowDisplayAffinity GetWindowTextW GetWindowTextLengthW GetWindowRect DestroyIcon CreateIcon SetWindowPos SetForegroundWindow SendInput MapVirtualKeyW CreateIconFromResourceEx SendMessageW GetSystemMetrics GetActiveWindow IsIconic IsWindowVisible GetClientRect PostMessageW DisplayConfigGetDeviceInfo SystemParametersInfoA ChangeDisplaySettingsExW DestroyWindow DispatchMessageW TranslateMessage PeekMessageW GetWindowLongPtrW RegisterRawInputDevices SetWindowLongPtrW CreateWindowExW MonitorFromRect ScreenToClient GetKeyState RegisterClipboardFormatW IsClipboardFormatAvailable GetClipboardData RegisterTouchWindow GetTouchInputInfo CloseTouchInputHandle EmptyClipboard OpenClipboard CloseClipboard SetClipboardData

shell32

DragQueryFileW DragFinish SHCreateItemFromParsingName SHGetKnownFolderPath

combase

CoTaskMemFree

ntdll

NtReadFile RtlNtStatusToDosError NtWriteFile NtOpenFile

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

advapi32

RevertToSelf ImpersonateAnonymousToken

gdi32

CreateBitmap SetBitmapBits DeleteObject CreateCompatibleBitmap SetPixelFormat SwapBuffers DescribePixelFormat GetDeviceCaps CreateRectRgn ChoosePixelFormat GetPixelFormat

opengl32

wglGetCurrentContext wglCreateContext wglMakeCurrent wglGetProcAddress wglDeleteContext

setupapi

SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW

dxgi

CreateDXGIFactory1

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext ImmGetCompositionStringW ImmAssociateContextEx ImmGetContext

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow

uxtheme

SetWindowTheme

vcruntime140

__current_exception_context __current_exception _CxxThrowException memset __CxxFrameHandler3 memmove memcmp memcpy __C_specific_handler

api-ms-win-crt-math-l1-1-0

logf exp2 fmodf exp log2f log1p ceilf fmaf floorf powf sinf sin cosf roundf fmod expf cbrtf _hypotf log1pf tanhf __setusermatherr trunc acoshf acosh asinhf asinh atan atanf asin asinf acos tanh cos tanf sinh sinhf cosh coshf log log2 cbrt fma tan atan2 _hypot log10 ceil exp2f acosf truncf floor pow round atan2f

api-ms-win-crt-string-l1-1-0

wcslen strlen

api-ms-win-crt-runtime-l1-1-0

terminate _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _initialize_onexit_table _register_onexit_function strerror

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-13_1edc5b901710c7eef4a15b133069e5a1_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

bcryptprimitives

kernel32

oleaut32

ole32

user32

shell32

combase

ntdll

api-ms-win-core-synch-l1-2-0

advapi32

gdi32

opengl32

setupapi

dxgi

imm32

dwmapi

uxtheme

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic