General
- Target 2026-10-02_577ccc60c93b15a808ef46d14503196d_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom
- Size 908KB
- Sample261003-phfjlayama
- SHA256 4fec4df88676c2021a3c1e7f2b2a20ba3f7793717d96e70306554d41339d849e
- MD5 577ccc60c93b15a808ef46d14503196d
- SHA1 75c5eb69bbf7e25a424062f01e94304d688d39fd
- SHA512 31a2e63b4de23a5e1da86bd1d445a2691a3727192fd8f177cc3a992233440aa3b13b5736092215b188d8e6d5e9c5aaf825123f04185ea65cdbd799585a3cfa12
- SSDEEP 12288:o7TUilKpt/MXsIJ1hqFDDipUylwxGztTjR9KQl3TWV+fHlj6o+:o7TUaQ1owxGZ3RQ8Nfto
- TLSH T18C153A61634E6AF4F5D4C6FAEB0855A3E675B866D5F346DE003B022FBC4C71022F6922
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_577ccc60c93b15a808ef46d14503196d_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_577ccc60c93b15a808ef46d14503196d_akira_cobalt-strike_icedid_rusty-stealer_ryuk_satacom
- Size 908KB
- SHA256 4fec4df88676c2021a3c1e7f2b2a20ba3f7793717d96e70306554d41339d849e
- MD5 577ccc60c93b15a808ef46d14503196d
- SHA1 75c5eb69bbf7e25a424062f01e94304d688d39fd
- SHA512 31a2e63b4de23a5e1da86bd1d445a2691a3727192fd8f177cc3a992233440aa3b13b5736092215b188d8e6d5e9c5aaf825123f04185ea65cdbd799585a3cfa12
- SSDEEP 12288:o7TUilKpt/MXsIJ1hqFDDipUylwxGztTjR9KQl3TWV+fHlj6o+:o7TUaQ1owxGZ3RQ8Nfto
- TLSH T18C153A61634E6AF4F5D4C6FAEB0855A3E675B866D5F346DE003B022FBC4C71022F6922
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext