General
- Target 2026-09-27_d76c8615cf70c9b323cdbeaa3a070346_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom
- Size 637KB
- Sample260928-xpvabscf69
- SHA256 7974e96acd1e02a79b7258e5a89b556fdf5c22500d1292e055ecc8fdb83333d3
- MD5 d76c8615cf70c9b323cdbeaa3a070346
- SHA1 e570d7e6406b893bc7018137f31b49c58dd468b5
- SHA512 955e6e0bb7f3c32f5bd19fac6d7b06a880099f8834caa4b46e5d21301736cba6019f4aa60839df265c05ede5c5955d9a9f3a2c7273ac5ba21387d4c11e615e5b
- SSDEEP 12288:Ynuj2ccu3V+66gmXban7tmxlx/xKcocMuCzxNgWNsQ7GbtAszyjYeE2:VXsRLV/1oc0zQQ7NG+Yc
- TLSH T119D4F153A3D046F1EA315073CE20260299E5B8C947F686EF779C4E59AC5AADC4E3F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-27_d76c8615cf70c9b323cdbeaa3a070346_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-27_d76c8615cf70c9b323cdbeaa3a070346_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom
- Size 637KB
- SHA256 7974e96acd1e02a79b7258e5a89b556fdf5c22500d1292e055ecc8fdb83333d3
- MD5 d76c8615cf70c9b323cdbeaa3a070346
- SHA1 e570d7e6406b893bc7018137f31b49c58dd468b5
- SHA512 955e6e0bb7f3c32f5bd19fac6d7b06a880099f8834caa4b46e5d21301736cba6019f4aa60839df265c05ede5c5955d9a9f3a2c7273ac5ba21387d4c11e615e5b
- SSDEEP 12288:Ynuj2ccu3V+66gmXban7tmxlx/xKcocMuCzxNgWNsQ7GbtAszyjYeE2:VXsRLV/1oc0zQQ7NG+Yc
- TLSH T119D4F153A3D046F1EA315073CE20260299E5B8C947F686EF779C4E59AC5AADC4E3F720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext