Analysis

  • max time kernel
    150s
  • max time network
    130s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/10/2026, 23:14

General

  • Target
    2026-10-21_67a88df76f2017441423ffbebe407e14_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
  • Size 40.4MB
  • Sample261022-28b1bavvfx
  • SHA256 0af3e22c9af0f3dea3d6c4e409fe15f0e17b6815e75449e3ee5f500a1044bdf8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-21_67a88df76f2017441423ffbebe407e14_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-21_67a88df76f2017441423ffbebe407e14_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
    1⤵
      PID:928

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-14c64b51ec7943eaae18fb8b9f791d45\meeting-vault.db-wal
          • Size 128KB
          • SHA256 fb020515e7675f22aece1f258e42bc650853be5673dba32bdee01d7d42bcd452
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-163ba5336d1044738a9a266e08b8d2ef\meeting-vault.db-wal
          • Size 16KB
          • SHA256 128e3a5e44ba33fa4039e2c5e68e3cf2573ccbe5331a74bdcd19eac341d8ed40
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-2c852bfea0754607905d7e428da4de62\meeting-vault.db-wal
          • Size 44KB
          • SHA256 6ea07bdb8db7dd97eaf387eead95ef0b58368bc50562c382e3b067160629cda4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-2f307bdd4f2e4a588ed4ee30e7085988\meeting-vault.db-wal
          • Size 96KB
          • SHA256 9612a853fc6b654da3fdc7047c1182a31737a30dbe43ce832624a02baf0f0409
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-42c0c1b37d7c4aa5b03abe5c9957d037\meeting-vault.db-wal
          • Size 92KB
          • SHA256 ce5f9dc8195d2389db704e7be045b14c9a84fd52fdb91137b5b507c6b6bfa016
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-52b9a9a69ded45f285d5a5f86dd66c74\meeting-vault.db
          • Size 488KB
          • SHA256 96c6156dc7b6fe056b76cbd79e0b941e41f66ee2b2f6c73ccab1302b0a10a45d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-52b9a9a69ded45f285d5a5f86dd66c74\meeting-vault.db-wal
          • Size 52KB
          • SHA256 a58ce8a7b013de8377d3e5bbba7ed3a6053e9dd4bfa78c45d00a96694004f9dc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-60c33f480a434c5694cac8cfebed0a25\meeting-vault.db-wal
          • Size 36KB
          • SHA256 caf0c5a2b84ebd6884af2387e19e35dd7c68f25a8e2b6ce0653c586f320fcadc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-65d313442d714fc0a30b98dcf7ffe1b6\meeting-vault.db-wal
          • Size 16KB
          • SHA256 3a47cd0c84247f2a19f1ae3d48fd33ad579cb0f4bd1d9ea75feb00f301bb6d68
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-67de1568d24549739d96714246524362\meeting-vault.db-wal
          • Size 24KB
          • SHA256 5cae8a7c93e2e981b9f14ab74e66bc366cc351abbb86bcc1f737382abbc687b8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-6991ac64cf0c440c859de33deb351756\meeting-vault.db-wal
          • Size 52KB
          • SHA256 65676ece7924044e9b6b57c0b87b6d62ff9a40a10f69a1c56a6bf0bf3a448247
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-7569448bb7234316b169efd37e257e05\meeting-vault.db-wal
          • Size 16KB
          • SHA256 215043b028f531812c193d611d4fb4239dad8f5b9435d7772f8977ac1acd1613
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-88ff534adc9f449ba044d09885b06592\meeting-vault.db-wal
          • Size 16KB
          • SHA256 f17ca90521ed27620ab0074841f0d02d10d871b95b0f3450d2403eb8c0dbe0ba
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-8d8dfbd1e5d3400c85f5aeba08b35d27\meeting-vault.db-wal
          • Size 76KB
          • SHA256 ee7f2fabc556529bc80a847392b50f44a335b4ca34d3fe24c17288fd16f76dca
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-8f548e5c3a8f4da39a5168c0a85f2e25\meeting-vault.db-wal
          • Size 16KB
          • SHA256 fcf4dbd121608393e4de6b177dd9b536f4570f958cc3d398e84f8291c6c0a04a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-a14b80e011234986a3582a1148da957d\meeting-vault.db-wal
          • Size 16KB
          • SHA256 78051847516f79287a97244daa1a5cccfd95b879459933ada8ab15dcd5be7e41
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-ae9106cd48064b4d99f63773eac78fea\meeting-vault.db-wal
          • Size 16KB
          • SHA256 a6576f7ae59a3ac0cee72461d6c8e24473a089b4120dbe005d66b3cc537b00c9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-b267b8bdee9a4b3da7e7046caab4b91e\meeting-vault.db-wal
          • Size 16KB
          • SHA256 a3e483996277ea9363f3875b21c92e504e6806b8e7d6553c8dc79ac2e6fd78af
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-b5bd6ac1f2ba4585ad22e8a53cee67a8\meeting-vault.db-wal
          • Size 16KB
          • SHA256 0352f9b5737e28a3211c13af753f1a71af2322f685f7f17f1f7192a68c0e2a74
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-b5f3cde184c34d0b96d14d2f496bfe17\meeting-vault.db-wal
          • Size 100KB
          • SHA256 5ae3cae3232ff37d6e1a61a6dbad35a3bb9909f730d6428ff0f084d50128c659
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-c6a9355d8e7c4416a14807d47c366848\meeting-vault.db-wal
          • Size 16KB
          • SHA256 4d0bfdf78ed286952c06cf05d9a9fb58db2530be4a5df13c146a33e4245f4958
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-ef89b810fa594c1ca018c4ccbc1dd730\meeting-vault.db-wal
          • Size 8KB
          • SHA256 dfc2a0123de24ae1157fdbdf93ff1ab7b6a4c4f990f6159a2bf66e1b0801a202
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-f2f29ef1c7424440a5c92237208c58cd\meeting-vault.db-wal
          • Size 221KB
          • SHA256 c1d2e451b49f29fb7bccd4bed0d7cf68b11189827d5683c845bda41455c659cb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-f6008992f959427386565e360b46ab8b\meeting-vault.db-wal
          • Size 16KB
          • SHA256 2bd75d871592b65ee347e2d466c51cb14f6430c49672d587abc2b95c663d52b2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-f731d7af582346a0bbcefb0bfb18b4a1\meeting-vault.db-wal
          • Size 16KB
          • SHA256 460619e52941c8d8e6ef91f5de3c9a26e7aa31a347351ba89da8a4b98d852c51
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-f7f109abbb9b4233adbe2354c290b9d1\meeting-vault.db-wal
          • Size 52KB
          • SHA256 1412456bce41e6c10f5ea3cce9f9f1b04feddf2e3e49625bac387cdc2d0774b8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mv-template-db-44-d02123b9b896174a.db

          • Path C:\Users\Admin\AppData\Local\Temp\mv-template-db-44-d02123b9b896174a.db
          • Size 488KB
          • SHA256 d88cdb501b50b2c27b9ec6a71919ed5ea3aeae8709050e5fb14b49678b495aa0
          • MD5 SHA1 SHA512 SSDEEP TLSH