General
- Target 2026-10-01_3e77721a9dfb577f29f410b1029904cc_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 6.4MB
- Sample261002-tmn4razse1
- SHA256 91829aa51bf535cc27f0e808ba2688a41192f11287d68604b7eac3838c940367
- MD5 3e77721a9dfb577f29f410b1029904cc
- SHA1 37c865f5b3b2ba8a56038a56c9d6e541f2dc6c57
- SHA512 3e8b89d6d4e7d5f816d28c69320dc496612b5366c152b70c0b1cc98ab8b458154d6427e42b9b76a4be4d44e7031b666ea635d501b433d891eba3721217fb791c
- SSDEEP 98304:V/6jhdlGrkgTGLnAOKIG/R2/2AtU023W:Qjro+9tG/RUZp4W
- TLSH T1C4665B027F8A59EAC19CC874C34B8B934A2270CB1A37FABF06C545253F696B55F2C359
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_3e77721a9dfb577f29f410b1029904cc_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_3e77721a9dfb577f29f410b1029904cc_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 6.4MB
- SHA256 91829aa51bf535cc27f0e808ba2688a41192f11287d68604b7eac3838c940367
- MD5 3e77721a9dfb577f29f410b1029904cc
- SHA1 37c865f5b3b2ba8a56038a56c9d6e541f2dc6c57
- SHA512 3e8b89d6d4e7d5f816d28c69320dc496612b5366c152b70c0b1cc98ab8b458154d6427e42b9b76a4be4d44e7031b666ea635d501b433d891eba3721217fb791c
- SSDEEP 98304:V/6jhdlGrkgTGLnAOKIG/R2/2AtU023W:Qjro+9tG/RUZp4W
- TLSH T1C4665B027F8A59EAC19CC874C34B8B934A2270CB1A37FABF06C545253F696B55F2C359
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1