2026-09-25_a58f423865d5f4f83997b9d4f54f8e6c_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-25_a58f423865d5f4f83997b9d4f54f8e6c_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 21.9MB
Sample260925-1menmszzbv
SHA256 af94bfda5f33c3557ec1f055dd4dc0572833941beb46b296e31f25aad9837aa4
MD5 a58f423865d5f4f83997b9d4f54f8e6c
SHA1 80442dafdcfa09324b9b3e4318036ae9b21bd2b8
SHA512 d62bb05a14ae140c70e76f02b8f888d893c7d1d271d29f6e689909fe46135a5199e5c1272fae87128f40e3c059447a15ea78d3be97858be24923fa9fc425ce8b
SSDEEP 98304:wfCiJ8vPIdz03fmswOa/+moLS+h7JjjJ7e8WLvl+sYtMASmF6gZSPKAHFWxO9Vnp:yf8Hh3E/+q+h7PvWrl506FgBe6
TLSH
T14037D72677786499D1BBC07892838F22AE2170E907393BF745D1827A2F24EF86D3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-25_a58f423865d5f4f83997b9d4f54f8e6c_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-09-25_a58f423865d5f4f83997b9d4f54f8e6c_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 21.9MB

2026-09-25_a58f423865d5f4f83997b9d4f54f8e6c_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH dda5945c718fcae7a1d14e85e1528e8a
SHA256 af94bfda5f33c3557ec1f055dd4dc0572833941beb46b296e31f25aad9837aa4
MD5 a58f423865d5f4f83997b9d4f54f8e6c
SHA1 80442dafdcfa09324b9b3e4318036ae9b21bd2b8
SHA512 d62bb05a14ae140c70e76f02b8f888d893c7d1d271d29f6e689909fe46135a5199e5c1272fae87128f40e3c059447a15ea78d3be97858be24923fa9fc425ce8b
SSDEEP 98304:wfCiJ8vPIdz03fmswOa/+moLS+h7JjjJ7e8WLvl+sYtMASmF6gZSPKAHFWxO9Vnp:yf8Hh3E/+q+h7PvWrl506FgBe6
TLSH
T14037D72677786499D1BBC07892838F22AE2170E907393BF745D1827A2F24EF86D3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16768336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

testcontainers-85a9e402d449187d.pdb

bcryptprimitives

ProcessPrng

kernel32

GetCurrentProcess SetNamedPipeHandleState CreateFileW GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle GetSystemTimeAsFileTime CloseHandle DuplicateHandle SetFileCompletionNotificationModes CreateIoCompletionPort PostQueuedCompletionStatus GetQueuedCompletionStatusEx ReadFile GetOverlappedResult GetProcAddress WriteFile CancelIoEx GetModuleHandleW SetHandleInformation InitializeSListHead FindNextFileW GetTempPathW GetModuleHandleA WaitForMultipleObjects FormatMessageW GetFileType GetFileAttributesW GetConsoleOutputCP GetConsoleMode WriteConsoleW MultiByteToWideChar GetModuleFileNameW HeapAlloc DeviceIoControl GetFinalPathNameByHandleW ReleaseMutex CreateMutexA LoadLibraryA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess FindClose FindFirstFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetEnvironmentStringsW GetExitCodeProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle CancelIo GetSystemTimePreciseAsFileTime RtlLookupFunctionEntry RtlCaptureContext SetUnhandledExceptionFilter ReadFileEx GetCurrentProcessId CreateEventW CreateThread QueryPerformanceCounter QueryPerformanceFrequency HeapReAlloc HeapFree GetProcessHeap SetFileTime SetFileInformationByHandle GetCurrentThreadId GetFullPathNameW SetLastError SleepEx WriteFileEx FreeEnvironmentStringsW WaitForSingleObject GetLastError CompareStringOrdinal RtlVirtualUnwind

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

advapi32

SystemFunction036

crypt32

CertEnumCertificatesInStore CertCloseStore CertOpenStore CertFreeCertificateContext CertDuplicateCertificateContext CertGetEnhancedKeyUsage CertVerifyTimeValidity

ws2_32

shutdown getsockname getpeername setsockopt getsockopt send connect bind WSAGetLastError WSAIoctl WSASend recv freeaddrinfo WSACleanup WSAStartup WSASocketW getaddrinfo ioctlsocket closesocket

bcrypt

BCryptGenRandom

ntdll

NtCreateNamedPipeFile NtWriteFile NtCreateFile NtReadFile NtCancelIoFileEx NtOpenFile NtDeviceIoControlFile RtlNtStatusToDosError

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception __current_exception_context memset __CxxFrameHandler3 memcpy __C_specific_handler _CxxThrowException memcmp memmove

api-ms-win-crt-math-l1-1-0

log2 pow floor ceil __setusermatherr fmod

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _get_initial_narrow_environment _configure_narrow_argv _initterm _initialize_onexit_table _register_thread_local_exe_atexit_callback exit _exit terminate __p___argc _register_onexit_function __p___argv _cexit _c_exit _initialize_narrow_environment _initterm_e _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-25_a58f423865d5f4f83997b9d4f54f8e6c_akira_cobalt-strike_glassworm_rusty-stealer_satacom

bcryptprimitives

kernel32

api-ms-win-core-synch-l1-2-0

advapi32

crypt32

ws2_32

bcrypt

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic