Analysis

  • max time kernel
    150s
  • max time network
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    18/10/2026, 15:19

General

  • Target
    2026-10-18_42dcc025b3e11bd390f2d224a7921daf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
  • Size 32.3MB
  • Sample261018-sqdxhsbe65
  • SHA256 46bdc8c21920a8d253aaad11269bfb37803ba89aa94f178f2e39443021101ec2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-18_42dcc025b3e11bd390f2d224a7921daf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-18_42dcc025b3e11bd390f2d224a7921daf_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
    1⤵
      PID:3100
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k GPSvcGroup
      1⤵
        PID:4976

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            meeting-vault.db

            • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-05939ee04aab44fd817de5ec91c5acfa\meeting-vault.db
            • Size 4KB
            • SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
            • MD5 SHA1 SHA512 TLSH

            meeting-vault.db

            • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-e3c90e43cccb4118bd6027d8b185cd96\meeting-vault.db
            • Size 444KB
            • SHA256 4846ef99333b8cb020267410cf8686e876bc8bdab73f0331bf44e3d3a223f580
            • MD5 SHA1 SHA512 SSDEEP TLSH