2026-10-05_69eea9bc93402800f06588594c6df31e_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-05_69eea9bc93402800f06588594c6df31e_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom
Size 14.8MB
Sample261006-2kascaas6p
SHA256 62aaa1bcebf3d63da7ff25c27d972483ecb020b71ba0ad0d4e34de5d667954b1
MD5 69eea9bc93402800f06588594c6df31e
SHA1 1318a0d5d9b0fcdc7386b0fdd8dfcb142980a1a9
SHA512 1147cdd0059991f0697847e041d61fbbd17de145cb58beff3bdfb98c6ba5a4624cce26020a0cab605cced8b6f250b80eb51c55b5edc1327580a1acbc30d0367c
SSDEEP 98304:i3bRBiH5jO0slusI7EzkCnE6OX4UH8+yNfDuaIBwHNdwIFu3TsizdYWs0LCbDDTQ:wBi5p8jqaIBwOko+UwmHFYk
TLSH
T162F64B43E26291E9C129C074831A6233FA32BC4A473576E77BDC7A213F75F906A39B15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-05_69eea9bc93402800f06588594c6df31e_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom

File Explorer

2026-10-05_69eea9bc93402800f06588594c6df31e_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom

.exe 14.8MB

2026-10-05_69eea9bc93402800f06588594c6df31e_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom

IMPHASH b382922f0a15f5f9f2f9e5484826845e
SHA256 62aaa1bcebf3d63da7ff25c27d972483ecb020b71ba0ad0d4e34de5d667954b1
MD5 69eea9bc93402800f06588594c6df31e
SHA1 1318a0d5d9b0fcdc7386b0fdd8dfcb142980a1a9
SHA512 1147cdd0059991f0697847e041d61fbbd17de145cb58beff3bdfb98c6ba5a4624cce26020a0cab605cced8b6f250b80eb51c55b5edc1327580a1acbc30d0367c
SSDEEP 98304:i3bRBiH5jO0slusI7EzkCnE6OX4UH8+yNfDuaIBwHNdwIFu3TsizdYWs0LCbDDTQ:wBi5p8jqaIBwOko+UwmHFYk
TLSH
T162F64B43E26291E9C129C074831A6233FA32BC4A473576E77BDC7A213F75F906A39B15
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9469008

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Muh_Patcher.pdb

kernel32

WideCharToMultiByte GlobalFree GlobalLock GetModuleHandleA RtlLookupFunctionEntry SetLastError WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex GlobalAlloc FormatMessageW SetHandleInformation CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW CreateThread SleepEx ExitProcess HeapAlloc MultiByteToWideChar SetWaitableTimer Sleep CreateWaitableTimerExW GlobalUnlock CreateEventW DuplicateHandle WaitForMultipleObjects TerminateProcess GetCurrentProcess LoadLibraryW GetCurrentThread SetThreadStackGuarantee LCIDToLocaleName GetUserDefaultUILanguage GetModuleHandleExW SystemTimeToTzSpecificLocalTime ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime GetStartupInfoW RtlPcToFileHeader RaiseException LoadLibraryExA FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer IsProcessorFeaturePresent IsDebuggerPresent OutputDebugStringA OutputDebugStringW VirtualProtect RtlUnwind GetACP CompareStringW LCMapStringW GetExitCodeProcess WaitForSingleObject SwitchToThread GlobalSize IsValidCodePage GetOEMCP GetCPInfo OpenProcess GetCurrentProcessId GetStringTypeW HeapSize GetModuleHandleW GetCurrentThreadId lstrlenW CloseHandle GetSystemTimePreciseAsFileTime HeapReAlloc HeapFree GetProcessHeap GetModuleFileNameW LoadLibraryExW SetThreadErrorMode FreeLibrary GetProcAddress GetLastError ReadConsoleInputW LockFileEx FindClose SetFilePointerEx SetStdHandle CreatePipe AddVectoredExceptionHandler GetFileAttributesExW GetFileSizeEx UnhandledExceptionFilter GetCommandLineA WriteFile GetCommandLineW PeekNamedPipe GetFileType GetDriveTypeW DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection RtlUnwindEx SetConsoleMode InitializeSListHead SetEnvironmentVariableW FlushFileBuffers QueryPerformanceCounter GetStdHandle DeviceIoControl FileTimeToSystemTime SetFileInformationByHandle GetConsoleMode UnlockFileEx GetFileInformationByHandleEx GetQueuedCompletionStatusEx CreateIoCompletionPort GetTimeZoneInformation SetEndOfFile SetFileCompletionNotificationModes PostQueuedCompletionStatus RtlCaptureContext RtlVirtualUnwind GetCurrentDirectoryW GetConsoleOutputCP SetFileAttributesW WriteConsoleW GetEnvironmentVariableW MoveFileExW QueryPerformanceFrequency GetOverlappedResult CancelIoEx GetTempPathW GetFullPathNameW CreateFileW GetFinalPathNameByHandleW FindNextFileW CreateDirectoryW FindFirstFileExW ReadConsoleW GetFileInformationByHandle GetEnvironmentStringsW FreeEnvironmentStringsW SetUnhandledExceptionFilter GetVolumeInformationByHandleW GetConsoleWindow SetConsoleOutputCP SetConsoleCP GetConsoleCP SetCurrentDirectoryW CopyFileExW GetFileAttributesW ReadFileEx RemoveDirectoryW DeleteFileW ReadFile CancelIo WriteFileEx

ntdll

NtCreateFile RtlGetVersion NtReadFile NtCancelIoFileEx NtCreateNamedPipeFile NtDeviceIoControlFile NtWriteFile NtOpenFile RtlNtStatusToDosError

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

shell32

DragQueryFileW DragFinish SHGetKnownFolderPath ShellExecuteW SHAppBarMessage ShellExecuteExW

ole32

RevokeDragDrop RegisterDragDrop CoTaskMemFree CoIncrementMTAUsage CoCreateInstance CoUninitialize CoCreateFreeThreadedMarshaler CoInitializeSecurity CoInitializeEx CoSetProxyBlanket CoTaskMemAlloc OleInitialize

user32

KillTimer SetTimer CreateIconFromResourceEx SetWindowDisplayAffinity FlashWindowEx SetCursorPos GetActiveWindow EnumDisplayMonitors IsIconic GetWindowPlacement GetMenu ReleaseDC OpenClipboard SetClipboardData MessageBoxW GetUpdateRect CloseClipboard GetWindowRect GetWindowTextLengthW GetWindowTextW IsClipboardFormatAvailable CreateWindowExW SetWindowLongPtrW ValidateRect GetClipboardData GetClassNameW RegisterRawInputDevices GetClassInfoExW MapVirtualKeyExW WaitForInputIdle GetRawInputData RegisterWindowMessageA DefWindowProcW GetKeyboardState ChangeDisplaySettingsExW GetAsyncKeyState SetWindowPlacement GetKeyboardLayout ToUnicodeEx MapVirtualKeyW RegisterClassExW DestroyIcon IsProcessDPIAware GetDC EnumChildWindows DispatchMessageA GetMessageA ShowWindow GetSystemMenu EnableMenuItem SetWindowLongW ShowCursor MonitorFromPoint AdjustWindowRectEx IsWindow GetClipCursor ClipCursor GetSystemMetrics RegisterTouchWindow SendMessageW PostMessageW SetPropW SystemParametersInfoA CreateWindowExA RegisterClassExA DefWindowProcA SetForegroundWindow GetWindow SetFocus EnumWindows GetKeyState SetWindowTextW LoadCursorW SetCursor GetMonitorInfoW MonitorFromWindow GetCursorPos CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SetCapture SystemParametersInfoW ReleaseCapture FillRect GetForegroundWindow MonitorFromRect ClientToScreen GetClientRect ScreenToClient EmptyClipboard SetWindowPos InvalidateRgn GetWindowLongW MsgWaitForMultipleObjectsEx DispatchMessageW TranslateMessage PeekMessageW PostThreadMessageW EnumDisplaySettingsA EnumDisplayDevicesA GetMessageW CreateIcon DestroyWindow GetWindowLongPtrW SendInput RedrawWindow

comctl32

DefSubclassProc RemoveWindowSubclass SetWindowSubclass

oleaut32

SafeArrayUnaccessData SysFreeString SetErrorInfo SysAllocStringLen SysStringLen GetErrorInfo VariantClear SafeArrayAccessData

gdi32

CreateSolidBrush DeleteObject CreateRectRgn GetDeviceCaps SetPixelFormat DescribePixelFormat GetPixelFormat ChoosePixelFormat SwapBuffers

shlwapi

SHCreateMemStream AssocQueryStringW

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext ImmAssociateContextEx ImmGetCompositionStringW

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow

advapi32

ImpersonateAnonymousToken RevertToSelf RegGetValueW EventUnregister EventWriteTransfer EventSetInformation EventRegister RegQueryValueExW RegOpenKeyExW SystemFunction036 RegCloseKey RegSetValueExW RegCreateKeyExW

uxtheme

SetWindowTheme

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness

opengl32

wglGetCurrentDC wglGetCurrentContext wglMakeCurrent wglGetProcAddress wglShareLists wglDeleteContext wglCreateContext

ws2_32

WSASend send recv WSACleanup WSAStartup freeaddrinfo getaddrinfo bind WSAIoctl WSASocketW shutdown getsockname getpeername setsockopt getsockopt closesocket select connect WSAGetLastError ioctlsocket

bcrypt

BCryptGenRandom

crypt32

CertDuplicateCertificateChain CertGetCertificateChain CertVerifyCertificateChainPolicy CertCloseStore CertDuplicateStore CertDuplicateCertificateContext CertOpenStore CertAddCertificateContextToStore CertFreeCertificateChain CertFreeCertificateContext CertEnumCertificatesInStore

secur32

AcceptSecurityContext InitializeSecurityContextW EncryptMessage DeleteSecurityContext FreeContextBuffer FreeCredentialsHandle ApplyControlToken AcquireCredentialsHandleA QueryContextAttributesW DecryptMessage

comdlg32

GetOpenFileNameW

Name

.text

Size

9.5MB

Virtual Size

9.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.0MB

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

119KB

Virtual Size

118KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

152KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-05_69eea9bc93402800f06588594c6df31e_akira_cobalt-strike_glassworm_icedid_njrat_rusty-stealer_satacom

kernel32

ntdll

bcryptprimitives

api-ms-win-core-synch-l1-2-0

shell32

ole32

user32

comctl32

oleaut32

gdi32

shlwapi

imm32

dwmapi

advapi32

uxtheme

api-ms-win-shcore-scaling-l1-1-1

opengl32

ws2_32

bcrypt

crypt32

secur32

comdlg32

generic