General
- Target 2026-09-23_ccc485612854a3c9c330bc7ca890795b_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom
- Size 620KB
- Sample260924-bs8q8sba86
- SHA256 e724422e0edb446a497b3a417831c9ca674db14691e3e17bb1a8670cad86a982
- MD5 ccc485612854a3c9c330bc7ca890795b
- SHA1 81c8b7115083d43c333003d12a68f1c810e33b76
- SHA512 30617a556d8540cac2102115c4bc46797de472fee5e280272f267e543bfa89a91671b58db480bf3121bc42afaa2200dd5d53cc9aa5347b3e55177f863b3c82c1
- SSDEEP 12288:KorXUfYQsLjo9tyzlqNU6z3W5B4Chq7SKZ7A+s80C/eENQL9:JE5uGnzmwEq57AWxbU
- TLSH T11CD4E0AD71E205F5E266527B80175B16AFE07C024B306EEF22B5C3616F22ACD5C3479B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-23_ccc485612854a3c9c330bc7ca890795b_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-23_ccc485612854a3c9c330bc7ca890795b_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_ccc485612854a3c9c330bc7ca890795b_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom
- Size 620KB
- SHA256 e724422e0edb446a497b3a417831c9ca674db14691e3e17bb1a8670cad86a982
- MD5 ccc485612854a3c9c330bc7ca890795b
- SHA1 81c8b7115083d43c333003d12a68f1c810e33b76
- SHA512 30617a556d8540cac2102115c4bc46797de472fee5e280272f267e543bfa89a91671b58db480bf3121bc42afaa2200dd5d53cc9aa5347b3e55177f863b3c82c1
- SSDEEP 12288:KorXUfYQsLjo9tyzlqNU6z3W5B4Chq7SKZ7A+s80C/eENQL9:JE5uGnzmwEq57AWxbU
- TLSH T11CD4E0AD71E205F5E266527B80175B16AFE07C024B306EEF22B5C3616F22ACD5C3479B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext