Analysis
- max time kernel
20s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 16:32
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe
- Size 429KB
- Sample260930-t15cwsda67
- SHA256 c46d1e6c3805050040bdaae9618e886bdc3acb10fc6aba618214f4a372a044e8
- MD5 ccf0f1ec3ca041c9aca690548eab214a
- SHA1 316ca707924a398a8d690663937345de0b6a2fbe
- SHA512 822398cdef2d92eec28707a33e1fda83a394364105b80e1571165b664d4ff8b55a4d8efcfc70de2a0b1e6a37327afd1384a4b34ca25acc5134c3b199480c75d2
- SSDEEP 6144:Lr3b4DwVdEXQCPD7fr1MRHLlCvlp55TBwvrXhHKSBx/M2L8PPrju4t:T48nEXXD9M8KTgK/M2LUPrV
- TLSH T1B294BF16FA9814F8E5ABC03CC2568A53A977B8420721DAEF036492343F67BE45F3DB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 972 wrote to memory of 1620 972 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 90 PID 1620 wrote to memory of 5092 1620 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 91 PID 5092 wrote to memory of 5484 5092 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 92 PID 5484 wrote to memory of 4968 5484 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 93 PID 4968 wrote to memory of 2448 4968 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 94 PID 2448 wrote to memory of 6076 2448 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 95 PID 6076 wrote to memory of 2512 6076 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 96 PID 2512 wrote to memory of 4328 2512 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 97 PID 4328 wrote to memory of 1776 4328 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 98 PID 1776 wrote to memory of 4432 1776 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 99 PID 4432 wrote to memory of 3412 4432 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 100 PID 3412 wrote to memory of 5852 3412 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 101 PID 5852 wrote to memory of 2024 5852 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 102 PID 2024 wrote to memory of 4256 2024 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 103 PID 4256 wrote to memory of 3636 4256 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 104 PID 3636 wrote to memory of 4368 3636 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 105 PID 4368 wrote to memory of 5460 4368 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 106 PID 5460 wrote to memory of 6080 5460 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 107 PID 6080 wrote to memory of 2464 6080 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 108 PID 2464 wrote to memory of 4476 2464 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 109 PID 4476 wrote to memory of 3672 4476 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 110 PID 3672 wrote to memory of 5900 3672 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 111 PID 5900 wrote to memory of 5380 5900 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 112 PID 5380 wrote to memory of 5500 5380 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 113 PID 5500 wrote to memory of 4520 5500 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 114 PID 4520 wrote to memory of 6096 4520 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 115 PID 6096 wrote to memory of 5064 6096 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 116 PID 5064 wrote to memory of 4212 5064 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 117 PID 4212 wrote to memory of 3516 4212 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 118 PID 3516 wrote to memory of 580 3516 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 119 PID 580 wrote to memory of 5844 580 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 120 PID 5844 wrote to memory of 2884 5844 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 121 PID 2884 wrote to memory of 4196 2884 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 122 PID 4196 wrote to memory of 2312 4196 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 123 PID 2312 wrote to memory of 6004 2312 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 124 PID 6004 wrote to memory of 5480 6004 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 125 PID 5480 wrote to memory of 2344 5480 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 126 PID 2344 wrote to memory of 2756 2344 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 127 PID 2756 wrote to memory of 1104 2756 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 128 PID 1104 wrote to memory of 3716 1104 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 129 PID 3716 wrote to memory of 4676 3716 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 130 PID 4676 wrote to memory of 6008 4676 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 131 PID 6008 wrote to memory of 4688 6008 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 132 PID 4688 wrote to memory of 3532 4688 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 133 PID 3532 wrote to memory of 1292 3532 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 134 PID 1292 wrote to memory of 5620 1292 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 135 PID 5620 wrote to memory of 5028 5620 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 136 PID 5028 wrote to memory of 4188 5028 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 137 PID 4188 wrote to memory of 3860 4188 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 138 PID 3860 wrote to memory of 4608 3860 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 139 PID 4608 wrote to memory of 4416 4608 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 140 PID 4416 wrote to memory of 5204 4416 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 141 PID 5204 wrote to memory of 620 5204 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 142 PID 620 wrote to memory of 2940 620 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 143 PID 2940 wrote to memory of 1240 2940 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 144 PID 1240 wrote to memory of 3768 1240 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 145 PID 3768 wrote to memory of 3624 3768 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 146 PID 3624 wrote to memory of 4808 3624 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 147 PID 4808 wrote to memory of 2636 4808 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 148 PID 2636 wrote to memory of 4596 2636 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 149 PID 4596 wrote to memory of 4280 4596 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 150 PID 4280 wrote to memory of 4392 4280 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 151 PID 4392 wrote to memory of 2892 4392 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 152 PID 2892 wrote to memory of 5556 2892 2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe 153
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:972 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"2⤵
- Suspicious use of WriteProcessMemory
PID:1620 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"3⤵
- Suspicious use of WriteProcessMemory
PID:5092 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"4⤵
- Suspicious use of WriteProcessMemory
PID:5484 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"5⤵
- Suspicious use of WriteProcessMemory
PID:4968 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"6⤵
- Suspicious use of WriteProcessMemory
PID:2448 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"7⤵
- Suspicious use of WriteProcessMemory
PID:6076 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"8⤵
- Suspicious use of WriteProcessMemory
PID:2512 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"9⤵
- Suspicious use of WriteProcessMemory
PID:4328 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"10⤵
- Suspicious use of WriteProcessMemory
PID:1776 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"11⤵
- Suspicious use of WriteProcessMemory
PID:4432 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"12⤵
- Suspicious use of WriteProcessMemory
PID:3412 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"13⤵
- Suspicious use of WriteProcessMemory
PID:5852 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"14⤵
- Suspicious use of WriteProcessMemory
PID:2024 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"15⤵
- Suspicious use of WriteProcessMemory
PID:4256 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"16⤵
- Suspicious use of WriteProcessMemory
PID:3636 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"17⤵
- Suspicious use of WriteProcessMemory
PID:4368 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"18⤵
- Suspicious use of WriteProcessMemory
PID:5460 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"19⤵
- Suspicious use of WriteProcessMemory
PID:6080 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"20⤵
- Suspicious use of WriteProcessMemory
PID:2464 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"21⤵
- Suspicious use of WriteProcessMemory
PID:4476 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"22⤵
- Suspicious use of WriteProcessMemory
PID:3672 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"23⤵
- Suspicious use of WriteProcessMemory
PID:5900 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"24⤵
- Suspicious use of WriteProcessMemory
PID:5380 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"25⤵
- Suspicious use of WriteProcessMemory
PID:5500 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"26⤵
- Suspicious use of WriteProcessMemory
PID:4520 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"27⤵
- Suspicious use of WriteProcessMemory
PID:6096 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"28⤵
- Suspicious use of WriteProcessMemory
PID:5064 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"29⤵
- Suspicious use of WriteProcessMemory
PID:4212 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"30⤵
- Suspicious use of WriteProcessMemory
PID:3516 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"31⤵
- Suspicious use of WriteProcessMemory
PID:580 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"32⤵
- Suspicious use of WriteProcessMemory
PID:5844 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"33⤵
- Suspicious use of WriteProcessMemory
PID:2884 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"34⤵
- Suspicious use of WriteProcessMemory
PID:4196 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"35⤵
- Suspicious use of WriteProcessMemory
PID:2312 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"36⤵
- Suspicious use of WriteProcessMemory
PID:6004 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"37⤵
- Suspicious use of WriteProcessMemory
PID:5480 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"38⤵
- Suspicious use of WriteProcessMemory
PID:2344 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"39⤵
- Suspicious use of WriteProcessMemory
PID:2756 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"40⤵
- Suspicious use of WriteProcessMemory
PID:1104 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"41⤵
- Suspicious use of WriteProcessMemory
PID:3716 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"42⤵
- Suspicious use of WriteProcessMemory
PID:4676 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"43⤵
- Suspicious use of WriteProcessMemory
PID:6008 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"44⤵
- Suspicious use of WriteProcessMemory
PID:4688 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"45⤵
- Suspicious use of WriteProcessMemory
PID:3532 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"46⤵
- Suspicious use of WriteProcessMemory
PID:1292 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"47⤵
- Suspicious use of WriteProcessMemory
PID:5620 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"48⤵
- Suspicious use of WriteProcessMemory
PID:5028 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"49⤵
- Suspicious use of WriteProcessMemory
PID:4188 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"50⤵
- Suspicious use of WriteProcessMemory
PID:3860 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"51⤵
- Suspicious use of WriteProcessMemory
PID:4608 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"52⤵
- Suspicious use of WriteProcessMemory
PID:4416 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"53⤵
- Suspicious use of WriteProcessMemory
PID:5204 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"54⤵
- Suspicious use of WriteProcessMemory
PID:620 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"55⤵
- Suspicious use of WriteProcessMemory
PID:2940 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"56⤵
- Suspicious use of WriteProcessMemory
PID:1240 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"57⤵
- Suspicious use of WriteProcessMemory
PID:3768 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"58⤵
- Suspicious use of WriteProcessMemory
PID:3624 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"59⤵
- Suspicious use of WriteProcessMemory
PID:4808 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"60⤵
- Suspicious use of WriteProcessMemory
PID:2636 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"61⤵
- Suspicious use of WriteProcessMemory
PID:4596 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"62⤵
- Suspicious use of WriteProcessMemory
PID:4280 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"63⤵
- Suspicious use of WriteProcessMemory
PID:4392 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"64⤵
- Suspicious use of WriteProcessMemory
PID:2892 -
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"65⤵PID:5556
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"66⤵PID:4372
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"67⤵PID:5836
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"68⤵PID:4428
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"69⤵PID:3232
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"70⤵PID:5680
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"71⤵PID:5796
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"72⤵PID:4560
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"73⤵PID:3216
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"74⤵PID:2832
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"75⤵PID:2072
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"76⤵PID:2180
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"77⤵PID:2148
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"78⤵PID:2620
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"79⤵PID:2260
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"80⤵PID:5776
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"81⤵PID:3908
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"82⤵PID:4876
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"83⤵PID:2044
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"84⤵PID:2908
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"85⤵PID:5436
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"86⤵PID:1868
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"87⤵PID:4284
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"88⤵PID:1972
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"89⤵PID:1856
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"90⤵PID:2540
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"91⤵PID:2812
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"92⤵PID:3452
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"93⤵PID:832
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"94⤵PID:5896
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"95⤵PID:4668
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"96⤵PID:2700
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"97⤵PID:3140
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"98⤵PID:5132
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"99⤵PID:6040
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"100⤵PID:5628
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"101⤵PID:3464
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"102⤵PID:244
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"103⤵PID:1252
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"104⤵PID:5700
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"105⤵PID:3344
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"106⤵PID:4804
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"107⤵PID:4124
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"108⤵PID:3192
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"109⤵PID:2856
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"110⤵PID:1652
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"111⤵PID:6068
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"112⤵PID:4524
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"113⤵PID:940
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"114⤵PID:1220
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"115⤵PID:2976
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"116⤵PID:3304
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"117⤵PID:3632
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"118⤵PID:2228
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"119⤵PID:5372
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"120⤵PID:724
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"121⤵PID:1148
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_ccf0f1ec3ca041c9aca690548eab214a_akira_cobalt-strike_icedid_rusty-stealer_satacom.exe"122⤵PID:5736
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-