Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    18/10/2026, 18:44

General

  • Target
    2026-10-18_01ee54d70ad3c042501003d89bf9f9e3_akira_cobalt-strike_rusty-stealer_satacom.exe
  • Size 18.7MB
  • Sample261018-xdklrags2p
  • SHA256 8156f1b86da7cb791b2a7528ed9c8339a68387638146f1b3d5cefb04d2495ef3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-18_01ee54d70ad3c042501003d89bf9f9e3_akira_cobalt-strike_rusty-stealer_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-18_01ee54d70ad3c042501003d89bf9f9e3_akira_cobalt-strike_rusty-stealer_satacom.exe"
    1⤵
      PID:4856

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          contract.db

          • Path C:\Users\Admin\AppData\Local\Temp\.tmp1rHfHf\contract.db
          • Size 4KB
          • SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
          • MD5 SHA1 SHA512 TLSH

          contract.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpCRtzcJ\contract.db-wal
          • Size 1.2MB
          • SHA256 62ec152ea3e5844995d948e5827b82dc7e3a7ae6d33c1615f41347be8e4c9510
          • MD5 SHA1 SHA512 SSDEEP TLSH

          contract.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpDTrwy0\contract.db-wal
          • Size 1.1MB
          • SHA256 2370c57088ff108b55e258381f03bc6655011a4ee75990a2b562cc43d3a8b4c6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          contract.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpIMmNLE\contract.db-wal
          • Size 1.1MB
          • SHA256 0679da6c1796e7394b4445dc84b4379e735c5ef3266c9468f860b30f7cc654c4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          contract.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpKYJyQz\contract.db-wal
          • Size 1.2MB
          • SHA256 18566552c452724e16613cbaed780ae003f67b66ce60caeebeda41171230c0f8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          contract.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpYYqMkl\contract.db-wal
          • Size 1.1MB
          • SHA256 b56b2b6a634878a42364098323bac3687a3021f02752f3e509444c0db3645625
          • MD5 SHA1 SHA512 SSDEEP TLSH

          contract.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpYcuIUp\contract.db-wal
          • Size 1.1MB
          • SHA256 331a5d299f8fe8fff6af456db64c16509311777f20ccfce9bd26f886d7e20d7f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          contract.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpYkNRgM\contract.db-wal
          • Size 1.2MB
          • SHA256 a3c53ff3a6832bb956f3bd8ad7f38ab55dc00bb13d01bd3a0479063dde98360e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          contract.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpZ8p2eO\contract.db-wal
          • Size 1.1MB
          • SHA256 0eb4ff62692d21eb032af441bac55179c45237f196af96de9c187b97ec286dbe
          • MD5 SHA1 SHA512 SSDEEP TLSH

          contract.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpoIaqf1\contract.db-wal
          • Size 1.2MB
          • SHA256 a7efad05c1ca52a54fbee429dd970d3083238285bc5bbb652798fcb735219fd7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          contract.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmppsCqV3\contract.db-wal
          • Size 1.1MB
          • SHA256 3cc13b811850a1ddec64c8c5daa570d7ae3b84220a13e9b32ae71379e8a56a75
          • MD5 SHA1 SHA512 SSDEEP TLSH

          contract.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpwkkwmS\contract.db-wal
          • Size 1.1MB
          • SHA256 a38be2ae064d30f715c42ec75ade16d1093c0ad52e6b4d7f3c783fdb89220c50
          • MD5 SHA1 SHA512 SSDEEP TLSH