8890981c558eb23666acbb8d13dafddfb6eebae20af977c626502211a246ed5f

Analysis

max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/10/2026, 16:07

Target
2026-10-02_20f90c3fdcc29ca9140b9aa3f80e3ef2_akira_cobalt-strike_rusty-stealer_satacom.exe
Size 134KB
Sample261003-tkq6bseb52
SHA256 8890981c558eb23666acbb8d13dafddfb6eebae20af977c626502211a246ed5f
MD5 20f90c3fdcc29ca9140b9aa3f80e3ef2
SHA1 0fd1ea7b8cd2083a46ce1dae7a68d952173e55cb
SHA512 cb1986c7dbf3bedca1827de1d70a953ec5710e7ff447c929e78fbb18e4c943f65ebd5f8731902321f66b4c65b90a971265453fab8862ca14a79a5e9ecdaf3565
SSDEEP 3072:AUs9QhWQVdLf/5AGYJldpPbrJtO0uiMHRQ3mdB1CG:AihDr3iGYbdpPb1z930h
TLSH
T16AD35C13764565F8E406C078C7158663BB76FCE90B226AFF566821343F19AEA7F38B10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4448 wrote to memory of 5548	4448	2026-10-02_20f90c3fdcc29ca9140b9aa3f80e3ef2_akira_cobalt-strike_rusty-stealer_satacom.exe	91
PID 4448 wrote to memory of 5548	4448	2026-10-02_20f90c3fdcc29ca9140b9aa3f80e3ef2_akira_cobalt-strike_rusty-stealer_satacom.exe	91

C:\Users\Admin\AppData\Local\Temp\2026-10-02_20f90c3fdcc29ca9140b9aa3f80e3ef2_akira_cobalt-strike_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-02_20f90c3fdcc29ca9140b9aa3f80e3ef2_akira_cobalt-strike_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4448
- C:\Windows\System32\GamePanel.exe
  C:\Windows\System32\GamePanel.exe
  2⤵
  PID:5548