Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/10/2026, 18:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-18_01ee54d70ad3c042501003d89bf9f9e3_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-18_01ee54d70ad3c042501003d89bf9f9e3_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
General
- Target 2026-10-18_01ee54d70ad3c042501003d89bf9f9e3_akira_cobalt-strike_rusty-stealer_satacom.exe
- Size 18.7MB
- Sample261018-xdklrags2p
- SHA256 8156f1b86da7cb791b2a7528ed9c8339a68387638146f1b3d5cefb04d2495ef3
- MD5 01ee54d70ad3c042501003d89bf9f9e3
- SHA1 26ffe4739727a511b8dd2bc7ad7b49f59aea0cbe
- SHA512 3a824693dcf72a9272c199bf3eccb506e9b702765dacf986c60927b0a10060c8b3c03e5c0a0b0e9ff9571391428761a697c64c2a3d01b8368e75ada3cb73a2c6
- SSDEEP 98304:FWy3U20XoosI2T23qLCvX7Q4JwmEVNXg1zfEzONaVh:g5p+I2n0X0swhHKNaV
- TLSH T11417D616677960D9C17BC0B882838F62A92174DD0B397BF749D1827A2F24EF8AD3C754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.tmp1rHfHf\contract.db
- Size 4KB
- SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
- MD5 b9263bbf24428aaca95d04d04f3aeb6f
- SHA1 5346015345f6df766df4bc9b42da076f6fdd440f
- SHA512 5bc2978bc96e1347500db552e2a2dfd9e5df25c8e16d3ab57e5519de43cb9c08f5aeefd1a6f6947d7fa253505918763b932f622636fc2a7a429fa72a5b49c7cc
- TLSH T1EE810440534000F1D05407F755D1130C0F07D3D4D5410F0355010041CC51D445C70FC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.tmpCRtzcJ\contract.db-wal
- Size 1.2MB
- SHA256 62ec152ea3e5844995d948e5827b82dc7e3a7ae6d33c1615f41347be8e4c9510
- MD5 b1f1303a55cf21025654370d3a5e3b28
- SHA1 50dfbb11a4fd83432573e74c47f488037e7d8c41
- SHA512 2419b91e8bdd0028c627a7d795f2c6ceff97a232e3dda678e2513c85543fabb6e106342a17ff984304d18496fd6a12be8da6128488eaa48831512823a9059a6e
- SSDEEP 3072:En1IjyujRjwXfjwjfjwehjwlGkZcjIoAKhgjIthsjIPhu:En+jyujRjGfjGfjXhjuDcjHt2jeKj48
- TLSH T15E555ECE9F24B704D1F150B2DCE15913E83D072E0B226392BAB881F69F73513E56A5E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.tmpDTrwy0\contract.db-wal
- Size 1.1MB
- SHA256 2370c57088ff108b55e258381f03bc6655011a4ee75990a2b562cc43d3a8b4c6
- MD5 b6617e2dc154e7a80df46a73c70b7070
- SHA1 ac15bd74bbf062a0ee1012a0e94f74b6753284a2
- SHA512 3b8c5420daa696ff5a58c829b7c29bcefc3d042ec9deb373fcdb9bea85d761c5c5b3a0489e500cbe906dc279cdd5ef0cf3ee2a1dd8146b57c610ad9fc96ab390
- SSDEEP 6144:ZprjdCjCjOfjUfjqmjuaRujZoCj8ZjYGsA:PV
- TLSH T11D354FCE9F24B700D1F150B2DCE15D12E83D072E4B226292BAB881F69F73953D57A4E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.tmpIMmNLE\contract.db-wal
- Size 1.1MB
- SHA256 0679da6c1796e7394b4445dc84b4379e735c5ef3266c9468f860b30f7cc654c4
- MD5 e05c84309352a54496a11b0fb6255ce2
- SHA1 6517b2d10daea674a8eeef85a099d259ee12aa06
- SHA512 f2e52462b33f6235e6a2aed6a79a895bab3c3905c916f0f52e37cd39e3f956c22feaeed8a72bb72796d0afc172947ecddc0ad9a689bc27fedc67117fa52bd052
- SSDEEP 3072:CAyIj1fjJjw4fjwEfjwgqjwOGFCjIMAGhOjIhhijIEh7m5:CA3j1fjJj1fjtfj1qjNMCjDRwjOIjPm
- TLSH T110353ECE9F24B700D1F150F2DCE15D12E83D472F4B226292BAB881F29F72953D56A4E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.tmpKYJyQz\contract.db-wal
- Size 1.2MB
- SHA256 18566552c452724e16613cbaed780ae003f67b66ce60caeebeda41171230c0f8
- MD5 7167023e49011a1af4d8817d8560ef62
- SHA1 e6c2fb2eb6c1fbe97f6c0bad8eac00fd77026841
- SHA512 7fd5d078299578775ae72de3d99c73c7c126cd892d096b938b5470141c818a4369e3c4d6f5a4f8fdaf64250bcfc783c41372d052c3a09afde0f633b3671851fa
- SSDEEP 6144:Yfu5j9zjwjAfjBfj0ZjOfsEjj30jDtj34:7
- TLSH T107454FCE9F24B700D1F150B2DCE15D12E83D472E4B226292BAB881F29F73553E57A4E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.tmpYYqMkl\contract.db-wal
- Size 1.1MB
- SHA256 b56b2b6a634878a42364098323bac3687a3021f02752f3e509444c0db3645625
- MD5 ffcc104e14d8b5b43f1fee5a7c634215
- SHA1 70ccb3218d0177303bd6e8c06e0a65a7c5d89309
- SHA512 bb8179f75acb98ffa236121461d63c4775ced4829540f5e14d290082ec2c32683f13526ceca3abf194605e0c4c00ea04b5eeef5d3b06c32ca60fa579a81678cc
- SSDEEP 3072:KjR5IjNPKjdjw0fjwGyfjwiUjw4GO3jI0A5hNFjIYhajInhy:uRijNKjdjpfjkfjjUjrD3jz21jDAjU0
- TLSH T172353FCE9F24B700D1F150B2DCE15D12E83D072E4B226292BAB881F69F73553D96E4E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.tmpYcuIUp\contract.db-wal
- Size 1.1MB
- SHA256 331a5d299f8fe8fff6af456db64c16509311777f20ccfce9bd26f886d7e20d7f
- MD5 2e46089efdbf15e379e3321d5d040469
- SHA1 1585bd4f550ce0eb193a398965cd043e8187941e
- SHA512 c68e596ff567af1660db00ffda8c8dbd28852cf086d6126ccc95d199c586e60ebcd8c79ba8ff8035c342ecf8d381837be8f0c039aae56e105546b761496a8ad0
- SSDEEP 6144:PlzjBDjPjWfjmfjpAjDKmjIuFjXbjOfrK:Y
- TLSH T137354FDE9F24B700D1F150B2DCE15D12E83D072E4B226292BAB881F29F73553E57A4E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.tmpYkNRgM\contract.db-wal
- Size 1.2MB
- SHA256 a3c53ff3a6832bb956f3bd8ad7f38ab55dc00bb13d01bd3a0479063dde98360e
- MD5 05fb56f5a13d701fd1de37401c64497c
- SHA1 b7d9774e4bf3d4e194a697915cc88008e89c9433
- SHA512 69f4b10cecdfeadb7990cf8db1afe0e0ef17db02d6a8a1eb9acfa81dbac6db6767c6b01d5930ae83275ff96bb58b416b0462a4789a2fb0dc3f49b8f6986d8bde
- SSDEEP 3072:1ZBnIjtOjCjwAfjwvfjwhb8jwwGloEjIwAfhNjIrhujINh14E:1ZBIjtOjCjpfjifjM8jv/Ej70TjUMj2r
- TLSH T153554FDE9F24B700D1F150B2DCE15D12E83D072E4B226392BAB881F29F72953D57A4E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.tmpZ8p2eO\contract.db-wal
- Size 1.1MB
- SHA256 0eb4ff62692d21eb032af441bac55179c45237f196af96de9c187b97ec286dbe
- MD5 2f16dcd377da17dc8ac0f0f63d3964ee
- SHA1 1182fb33eb73a4f5c6e1fdd9f58d5f5c10242148
- SHA512 1009c94e1e428dcd7e058791f870479aecf92376b363682c9945c003937b1964a997ae3133e9b23e0b7b5f32371189c778a51f60ea6054250bb2354c5a477e79
- SSDEEP 3072:XlHdIjxzjzjwjfjwifjwjnjwoGAcjIhAuhyjIrhrjIJhG:XlH2jxzjzjWfjXfjSnjzRcjSF0jEtjKM
- TLSH T1EA3540CE9F24B700D1F150B2DCE15912E83D472F4B2262D2BAB841F29F73913D56A5EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.tmpoIaqf1\contract.db-wal
- Size 1.2MB
- SHA256 a7efad05c1ca52a54fbee429dd970d3083238285bc5bbb652798fcb735219fd7
- MD5 daabdb92f9e0f57ed6218c57ea3b7ae7
- SHA1 51158db0580c5077ca7cd5ad0005fcd6596fbc77
- SHA512 cf5d014858f8e21cde108ab4bb8dc9f83a9f3e2afc6b430b78b2af95247542759d34aff515a746f89509fa3d64968250af48fc502c7790561c9e49dff3c8ae44
- SSDEEP 6144:ufTOjEMj7jYfj8fjyajHxpj5AvjbQjENk:uM
- TLSH T1FF4541CE9F24B700D1F150B2DCE15D12E83D072E4B226392BAB881F69F72553E57A4E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.tmppsCqV3\contract.db-wal
- Size 1.1MB
- SHA256 3cc13b811850a1ddec64c8c5daa570d7ae3b84220a13e9b32ae71379e8a56a75
- MD5 3e7b583f55bed67b0ed6d9c3786aa360
- SHA1 34c2d9551fc865c992c440789935cc8a599c42a6
- SHA512 52e8a07cd35551a556e721cf6f7c49099b3900fbd2eb1924edf4228792929a5b6085e917ecd6c1d8ce8abfa7f223be0c8ffa96a369ebfb6a19b662001a45f364
- SSDEEP 3072:bVSIjkaKjBjwmfjwnfjw9WLjwpG2kjIdAxhqjIgh6jI7hF:bVXjkaKjBjTfjufjZLjmDkjuuAjPMjQb
- TLSH T19F454FCE9F24B700D1F150B2DCE15D12E83D472E4B226292BAB881F69F73513D97A4E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.tmpwkkwmS\contract.db-wal
- Size 1.1MB
- SHA256 a38be2ae064d30f715c42ec75ade16d1093c0ad52e6b4d7f3c783fdb89220c50
- MD5 af52b6f744c73fb87d14be96bdbc7104
- SHA1 1b01a50e135a6ad04f995607981c5074d01d9c04
- SHA512 1d1fb14aee759f52bbff19461aa63c8785668a90852c51193d019ff9cebada66cd8b9b8542c8fa1bc5881965f3e1036e9d5f97e80833a0ee62dc6c55ae04abd2
- SSDEEP 6144:3HEjWhjojefjofj8ljwtgj0HojNpDwjBF5UL:FDU5UL
- TLSH T15F353FCE9F24B700D1F150B2DCF19912A83D072E4B225292BAB881F69F73953D57E4E6
- MD5 SHA1 SHA512 SSDEEP TLSH