General
- Target 2026-09-27_04975f163242274e9d08f21d74b5d27b_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom
- Size 623KB
- Sample260928-lbbehszhnd
- SHA256 b64535d0644e923962c6f40e50840cefb6f5f7f44c1baa3db00abf4f2e1df188
- MD5 04975f163242274e9d08f21d74b5d27b
- SHA1 e9e0c738116e2f80f6d84e592e50b58385d93222
- SHA512 a22b402c37a5e4e86c84d144ac0f9c3b6795c8b471688ae68c583ff87b7c32915eae278526ebe1661a536b751506570cffabce8becfd34d787735728ee9db168
- SSDEEP 12288:PO5qT1OFGNGjJbEpevu1tQEdkls4vn6mcCxMn3xOtl78SCjfcgXOAcLbyA:PO56ZmSgjNx+krASCrcAYn
- TLSH T1E8D4E01DB3EE81FAD4126337C1064A426EE2B8469B704BEB2B94C7117FA25DC5D39B70
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-27_04975f163242274e9d08f21d74b5d27b_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-27_04975f163242274e9d08f21d74b5d27b_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom
- Size 623KB
- SHA256 b64535d0644e923962c6f40e50840cefb6f5f7f44c1baa3db00abf4f2e1df188
- MD5 04975f163242274e9d08f21d74b5d27b
- SHA1 e9e0c738116e2f80f6d84e592e50b58385d93222
- SHA512 a22b402c37a5e4e86c84d144ac0f9c3b6795c8b471688ae68c583ff87b7c32915eae278526ebe1661a536b751506570cffabce8becfd34d787735728ee9db168
- SSDEEP 12288:PO5qT1OFGNGjJbEpevu1tQEdkls4vn6mcCxMn3xOtl78SCjfcgXOAcLbyA:PO56ZmSgjNx+krASCrcAYn
- TLSH T1E8D4E01DB3EE81FAD4126337C1064A426EE2B8469B704BEB2B94C7117FA25DC5D39B70
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext