Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/10/2026, 22:22

General

  • Target
    2026-10-19_41ecb8d51949e4f37608c6a908b7d534_akira_cobalt-strike_rusty-stealer_satacom.exe
  • Size 4.7MB
  • Sample261020-2aaplaax4k
  • SHA256 12fb62e0ba00bd18bc83ccc369ae6a21758e636e11b1ad4b7848907463893cce
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-19_41ecb8d51949e4f37608c6a908b7d534_akira_cobalt-strike_rusty-stealer_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-19_41ecb8d51949e4f37608c6a908b7d534_akira_cobalt-strike_rusty-stealer_satacom.exe"
    1⤵
      PID:5656

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmp3IVsul\golden.db-wal
          • Size 1.1MB
          • SHA256 567ee7d909f011f07e8cef5c204d847b4e6d81f14df1a85a3e8cb27d48865c75
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmp6YAn7Z\golden.db-wal
          • Size 1.1MB
          • SHA256 bbbbf515a6dd84fe6f5a2b4a2c5a97702b87cb1098136e7fcae8358cac0913be
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmp70qCDZ\golden.db-wal
          • Size 1.1MB
          • SHA256 78adc8de807976f37c040b58d2c1798f270a9c37d716b221b8e546ef87d5ffa2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmp72tZCu\golden.db-wal
          • Size 1.1MB
          • SHA256 6465090cd2f9e4c0973c4792c09569313332501406fe93153bed06045fef1226
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmp88KkdQ\golden.db-wal
          • Size 1.1MB
          • SHA256 3bc4938478e4eb18f76f039e08bd0ea24a74da8cbb65dacb74c2a713ba87270f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpCRjpBX\golden.db-wal
          • Size 1.1MB
          • SHA256 6005f86c86635c2651c0995a6d5a1617580bd1949c2562e7f5ed73b793cf2a98
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpGO5YmM\golden.db-wal
          • Size 1.1MB
          • SHA256 c2f61299eeefc5c6b0482b95ec2c202074e7bc559ebee5161d7c3ced3566e45f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpGTlA8R\meeting-vault.db
          • Size 4KB
          • SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
          • MD5 SHA1 SHA512 TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpJxFVmm\golden.db-wal
          • Size 1.1MB
          • SHA256 5db47bbac83b5189d55ff138102159ebffcbecb1bc24cceed418c536aceb95e1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpLYUicB\golden.db-wal
          • Size 1.1MB
          • SHA256 d6a810c788eab86aacf4904300dfa9bf62b4a367e4f4a769ed7f80a67a17a072
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpMiAVhv\golden.db-wal
          • Size 1.1MB
          • SHA256 1abc4a4444350ddc4c0655e39d99385b160d8cf69d6b1123dad32e2573a72321
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpOSTdEU\golden.db-wal
          • Size 1.1MB
          • SHA256 215a27d0192f505b236dc070371ad2a77bdbc728be8c2f20f1403149a0205193
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpRxJKwD\golden.db-wal
          • Size 1.1MB
          • SHA256 5e9a3a7e55f560f87f832fdeb3ff751e141d9fbbf094efa172c6950298408599
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpSnal4b\golden.db-wal
          • Size 1.1MB
          • SHA256 4a5522424401a30df45f9c17251268bc41f64f7e96bdb1699c9fb7bc993b8e49
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpUV7GGz\golden.db-wal
          • Size 1.1MB
          • SHA256 7614e5e6f73b94fc14716c3d6d2894659dcb24f7d28bed01a5be0767a58456d1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpZnJlsx\golden.db-wal
          • Size 1.1MB
          • SHA256 391a0755d7fe51789cbdacdb260616b155c24fa2afa04312d88f825f19825669
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpbXsmAJ\golden.db-wal
          • Size 1.1MB
          • SHA256 e7f4af84236710c058589ba4da66217c88a6b5516a97153a3b67d7373e113e86
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpcJVXFr\golden.db-wal
          • Size 1.1MB
          • SHA256 a42badc0d6048380212854557acdcab2b3c0b44b70dc4c135acfcb6891faae45
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpcKc6a9\golden.db-wal
          • Size 1.1MB
          • SHA256 0c54878241515619ec1eef01f713bff8ef870eafdfbfe9c5d2ed8d5b8f93ce77
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpf5Wmiu\golden.db-wal
          • Size 1.2MB
          • SHA256 e0d66f302b26a10fe19d37347a29600b7cf5ab5f867e833bd897d49576f1b627
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpga2c1n\golden.db-wal
          • Size 1.1MB
          • SHA256 bb765a69752e2376eac962dae638ed17a15a34b6d68892929c4db22c7b218013
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmplxt59h\golden.db-wal
          • Size 1.1MB
          • SHA256 b42c83072bba777fd5641d9a7b0039c8783e5e6a220cbb41ba0c2fb63c8b7754
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpmgGVLo\golden.db-wal
          • Size 1.1MB
          • SHA256 1bbc0f4bde3d8aca2f1dc171251d52a97f2524f0e0eeee529c8aa6a1a7f67cb6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpntqpOV\golden.db-wal
          • Size 1.1MB
          • SHA256 a2800c7b1966a05a5553e5831aee4554879715389bae0d8211431ea5ed48059f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmprUc2sM\golden.db-wal
          • Size 1.1MB
          • SHA256 eb68545b3eaf72d7fc379bd7008a7b0a36a20d5f37c1277b64b7db88c2fd89bb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpwPN5cg\golden.db-wal
          • Size 1.1MB
          • SHA256 e3af7240c454a90f749f2ad5dfecfb10614fe6b19313ecfe2947962f48ea7c42
          • MD5 SHA1 SHA512 SSDEEP TLSH

          golden.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpwuHpfG\golden.db-wal
          • Size 1.1MB
          • SHA256 a5805c0e6b2c68dade97a571e6b63de90193adf6923fad89220acf74198d3eea
          • MD5 SHA1 SHA512 SSDEEP TLSH