General
- Target 2026-09-29_c712513d65f43224644670a96ddd8752_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom
- Size 948KB
- Sample260929-vc629abd59
- SHA256 958f016296adbb707885067fd22e7f9a3bd91b3751d24505532604905843d523
- MD5 c712513d65f43224644670a96ddd8752
- SHA1 db737409b11f2d73196b42d2f50389e20e2d9c17
- SHA512 91ed5a2f809cba028df015bf85c979b668522ca7c64191a47a2535eebd45d99105591af40fcc4d5087e9a532587069e5eb8da262ff7455792425a9b7502fc2d4
- SSDEEP 24576:37dYrMuN23ps7fAgBHfUH9OSfh/ND6O4whT+2engDJ4:rtg2ZsLnNfQxfh/yUen
- TLSH T11025ADC3658D03A5E05EBE77C90E5BE8DA31B76202F514BB320CD84DDD2ACD17E216A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_c712513d65f43224644670a96ddd8752_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_c712513d65f43224644670a96ddd8752_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom
- Size 948KB
- SHA256 958f016296adbb707885067fd22e7f9a3bd91b3751d24505532604905843d523
- MD5 c712513d65f43224644670a96ddd8752
- SHA1 db737409b11f2d73196b42d2f50389e20e2d9c17
- SHA512 91ed5a2f809cba028df015bf85c979b668522ca7c64191a47a2535eebd45d99105591af40fcc4d5087e9a532587069e5eb8da262ff7455792425a9b7502fc2d4
- SSDEEP 24576:37dYrMuN23ps7fAgBHfUH9OSfh/ND6O4whT+2engDJ4:rtg2ZsLnNfQxfh/yUen
- TLSH T11025ADC3658D03A5E05EBE77C90E5BE8DA31B76202F514BB320CD84DDD2ACD17E216A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext