2026-10-19_56388755a504b4993bfe521f323e4f68_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-19_56388755a504b4993bfe521f323e4f68_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 13.2MB
Sample261020-yp4z7set31
SHA256 430970ba3323e2fdae300e2ba4eae862375cc2db2ab1a9f548374f3c8dc7367a
MD5 56388755a504b4993bfe521f323e4f68
SHA1 6b3457608cb535fa63dc8b7eff8376cc55f4cad4
SHA512 89f4b17e1e8025535a8aeeb0531f016dfc28ff0ea879e645c50efbf5440227233bd54521a8b957b1e6017e1df981b04771b9222039324685ef629cfb8a2fbe69
SSDEEP 98304:ejgXsMwmcM+95PPlBWRAGgRVgIfwZfSV/7CvtmSF+sOfCrqJrSyhql+h7h8sNA:CAwM4PPlBZFwZfSV/dSFWW
TLSH
T1D9D6E61A6778A4EDC17BC0B8C2838F61692170D90B392BF745D1827A2F21EF9AD3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-19_56388755a504b4993bfe521f323e4f68_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-10-19_56388755a504b4993bfe521f323e4f68_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 13.2MB

2026-10-19_56388755a504b4993bfe521f323e4f68_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 7938ba10ed40a6e3211b8f2f547b5914
SHA256 430970ba3323e2fdae300e2ba4eae862375cc2db2ab1a9f548374f3c8dc7367a
MD5 56388755a504b4993bfe521f323e4f68
SHA1 6b3457608cb535fa63dc8b7eff8376cc55f4cad4
SHA512 89f4b17e1e8025535a8aeeb0531f016dfc28ff0ea879e645c50efbf5440227233bd54521a8b957b1e6017e1df981b04771b9222039324685ef629cfb8a2fbe69
SSDEEP 98304:ejgXsMwmcM+95PPlBWRAGgRVgIfwZfSV/7CvtmSF+sOfCrqJrSyhql+h7h8sNA:CAwM4PPlBZFwZfSV/dSFWW
TLSH
T1D9D6E61A6778A4EDC17BC0B8C2838F61692170D90B392BF745D1827A2F21EF9AD3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9653936

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

mv_providers-16195241c6b854f4.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

AddVectoredExceptionHandler CancelIo CancelIoEx CloseHandle CompareStringOrdinal CreateEventW CreateFileW CreateIoCompletionPort CreateMutexA CreateProcessW CreateThread CreateWaitableTimerExW DuplicateHandle ExitProcess FindClose FindFirstFileExW FormatMessageW FreeEnvironmentStringsW GetCommandLineW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileType GetFinalPathNameByHandleW GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetQueuedCompletionStatusEx GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitializeSListHead LoadLibraryA MultiByteToWideChar PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency ReadFile ReadFileEx ReleaseMutex RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetConsoleTextAttribute SetFileCompletionNotificationModes SetFileInformationByHandle SetFilePointerEx SetFileTime SetHandleInformation SetLastError SetNamedPipeHandleState SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile WriteFileEx lstrlenW

ws2_32

WSACleanup WSAGetLastError WSAIoctl WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv select send setsockopt shutdown

ntdll

NtCancelIoFileEx NtCreateFile NtCreateNamedPipeFile NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

userenv

GetUserProfileDirectoryW

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

vcruntime140

_CxxThrowException __C_specific_handler __CxxFrameHandler3 __current_exception __current_exception_context memcmp memcpy memmove memset

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _c_exit _cexit _configure_narrow_argv _crt_atexit _exit _get_initial_narrow_environment _initialize_narrow_environment _initialize_onexit_table _initterm _initterm_e _register_onexit_function _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type exit terminate

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-math-l1-1-0

__setusermatherr ceil floor fmod pow

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Name

.text

Size

9.2MB

Virtual Size

9.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

736KB

Virtual Size

735KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

513B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-19_56388755a504b4993bfe521f323e4f68_akira_cobalt-strike_glassworm_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ws2_32

ntdll

userenv

bcryptprimitives

bcrypt

advapi32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic