General
- Target 2026-10-10_3f4bb808cb1c0f75bcb2854f494ce5a0_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 19.0MB
- Sample261011-tpryesda49
- SHA256 76c73d94481eafa2f189fa234a25f0961473e2427334e84b7c735feab9217e5a
- MD5 3f4bb808cb1c0f75bcb2854f494ce5a0
- SHA1 e5129f01ab05ad6d8b080d9a2f13a54f49f9f90d
- SHA512 c52b4fba6397c36d9b14d7ad8231f52c9b710af4d8c022bf4192b0a3e97847226e55b7fd31731b83d27249b8dfbb22b226c3efb40131cacc284157c389426a8d
- SSDEEP 393216:Z5s2HBOMaY77v9GIAIJzB+2ga0Ddx3ED:Z5s2HBOMaY77v9GIAIJzlxD
- TLSH T1C11707257A5B99ACD09BC47483478A724A3130CB0B35B9FF449496382F6EBF46F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_3f4bb808cb1c0f75bcb2854f494ce5a0_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260911-en
25 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_3f4bb808cb1c0f75bcb2854f494ce5a0_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260911-en
24 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_3f4bb808cb1c0f75bcb2854f494ce5a0_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 19.0MB
- SHA256 76c73d94481eafa2f189fa234a25f0961473e2427334e84b7c735feab9217e5a
- MD5 3f4bb808cb1c0f75bcb2854f494ce5a0
- SHA1 e5129f01ab05ad6d8b080d9a2f13a54f49f9f90d
- SHA512 c52b4fba6397c36d9b14d7ad8231f52c9b710af4d8c022bf4192b0a3e97847226e55b7fd31731b83d27249b8dfbb22b226c3efb40131cacc284157c389426a8d
- SSDEEP 393216:Z5s2HBOMaY77v9GIAIJzB+2ga0Ddx3ED:Z5s2HBOMaY77v9GIAIJzlxD
- TLSH T1C11707257A5B99ACD09BC47483478A724A3130CB0B35B9FF449496382F6EBF46F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1