2026-10-10_b698decec31d9fec4bb70cfb8641ffe0_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-10_b698decec31d9fec4bb70cfb8641ffe0_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 12.0MB
Sample261011-e9tv7ae19x
SHA256 f3bbfc88c38e9ad82c8d17b736561d12a3dcdef20205efd0b5028383057d24cd
MD5 b698decec31d9fec4bb70cfb8641ffe0
SHA1 e183c989744373e167a3fa2506c0212894fb1990
SHA512 e1550ead487601bdaa51705cfa26bd1dbbe751c76b4b5549b11ce6978ef53027a2826a84a365469f85ab6a16d4cb4aa8a33ad402449771fa8c6241d3824d33a4
SSDEEP 98304:C0E3hCHViwbVwgzzlETm8WwzJmA+yYot+t4iNoZ4:CJ6iqwKETmUJv6il
TLSH
T1BAC6C616A77950D9D1BFC07892839F22B92134D907397BF749C1826A2F20EF8AD7D364
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_b698decec31d9fec4bb70cfb8641ffe0_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-10-10_b698decec31d9fec4bb70cfb8641ffe0_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 12.0MB

2026-10-10_b698decec31d9fec4bb70cfb8641ffe0_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH e5ae92d6119d0a4a91d4a2ab20288392
SHA256 f3bbfc88c38e9ad82c8d17b736561d12a3dcdef20205efd0b5028383057d24cd
MD5 b698decec31d9fec4bb70cfb8641ffe0
SHA1 e183c989744373e167a3fa2506c0212894fb1990
SHA512 e1550ead487601bdaa51705cfa26bd1dbbe751c76b4b5549b11ce6978ef53027a2826a84a365469f85ab6a16d4cb4aa8a33ad402449771fa8c6241d3824d33a4
SSDEEP 98304:C0E3hCHViwbVwgzzlETm8WwzJmA+yYot+t4iNoZ4:CJ6iqwKETmUJv6il
TLSH
T1BAC6C616A77950D9D1BFC07892839F22B92134D907397BF749C1826A2F20EF8AD7D364
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9318448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dayz_connector.pdb

kernel32

ReadFile GetOverlappedResult WriteFile CancelIoEx SetNamedPipeHandleState SetHandleInformation SetFileCompletionNotificationModes CreateIoCompletionPort PostQueuedCompletionStatus GetQueuedCompletionStatusEx SetConsoleMode GetConsoleMode CloseHandle CreateFileW SetConsoleTextAttribute GetConsoleScreenBufferInfo GetSystemTimeAsFileTime RtlLookupFunctionEntry RtlCaptureContext GetSystemInfo GetCurrentThreadId QueryPerformanceCounter GetSystemTimePreciseAsFileTime CreateThread GetConsoleOutputCP GetStdHandle InitializeSListHead MultiByteToWideChar HeapAlloc QueryPerformanceFrequency GetModuleFileNameW GetModuleHandleA GetFullPathNameW SetEnvironmentVariableW FormatMessageW GetModuleHandleW GetFileType SetUnhandledExceptionFilter FindClose FindFirstFileExW GetFileInformationByHandle SwitchToThread GetFileInformationByHandleEx GetFinalPathNameByHandleW WriteConsoleW RtlVirtualUnwind GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex GetLastError SetFileInformationByHandle SetFileTime WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

ws2_32

WSASend WSAIoctl bind recv ioctlsocket WSASocketW connect shutdown WSAGetLastError getsockname getpeername setsockopt getsockopt closesocket send getaddrinfo WSAStartup freeaddrinfo WSACleanup

ntdll

NtReadFile NtWriteFile NtCancelIoFileEx NtDeviceIoControlFile RtlNtStatusToDosError NtCreateFile

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

vcruntime140

__CxxFrameHandler3 memset __current_exception __current_exception_context _CxxThrowException __C_specific_handler memcpy memcmp memmove

api-ms-win-crt-math-l1-1-0

pow __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit _crt_atexit __p___argv __p___argc _set_app_type _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _cexit terminate _seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_b698decec31d9fec4bb70cfb8641ffe0_akira_cobalt-strike_glassworm_rusty-stealer_satacom

kernel32

api-ms-win-core-synch-l1-2-0

ws2_32

ntdll

bcryptprimitives

bcrypt

advapi32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic