2026-10-21_9aee19a4fe63967702b571ccafb385dd_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-21_9aee19a4fe63967702b571ccafb385dd_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 13.0MB
Sample261022-te77nadv8v
SHA256 6517a0f19032bc3e2b0ef435303def88916bb6193d9a1b9d187a2f3d3fb242a9
MD5 9aee19a4fe63967702b571ccafb385dd
SHA1 fe93f7f2ce0223ef6a820b00f58d3ded6c737279
SHA512 da3b1735d0db4a4a36da0d425aa4fbb1a6b2de501631c876cc72af3cb21fa29da69ac51ad20d5b9b8f03b6a8ef3025efb9b20738d8413da9f6dab1cc25f85f46
SSDEEP 98304:0U0KNYLEOCrt93ARK0mbZhrycat3O4vXg72ter+XHFka1XQkDPOdw92eCu:0yNIOat3O4vXg1cF23u
TLSH
T16ED6F6166778A4EDC17BC0B9C2938F21692170E94B392BF34591827A2F31EF96D3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_9aee19a4fe63967702b571ccafb385dd_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-10-21_9aee19a4fe63967702b571ccafb385dd_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 13.0MB

2026-10-21_9aee19a4fe63967702b571ccafb385dd_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 5d94e34401de88fadd459d744ee58116
SHA256 6517a0f19032bc3e2b0ef435303def88916bb6193d9a1b9d187a2f3d3fb242a9
MD5 9aee19a4fe63967702b571ccafb385dd
SHA1 fe93f7f2ce0223ef6a820b00f58d3ded6c737279
SHA512 da3b1735d0db4a4a36da0d425aa4fbb1a6b2de501631c876cc72af3cb21fa29da69ac51ad20d5b9b8f03b6a8ef3025efb9b20738d8413da9f6dab1cc25f85f46
SSDEEP 98304:0U0KNYLEOCrt93ARK0mbZhrycat3O4vXg72ter+XHFka1XQkDPOdw92eCu:0yNIOat3O4vXg1cF23u
TLSH
T16ED6F6166778A4EDC17BC0B9C2938F21692170E94B392BF34591827A2F31EF96D3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9374368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

mv_connectors-4614315d25f99efb.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

AddVectoredExceptionHandler CancelIo CancelIoEx CloseHandle CompareStringOrdinal CreateEventW CreateFileW CreateIoCompletionPort CreateMutexA CreateProcessW CreateThread CreateWaitableTimerExW DuplicateHandle ExitProcess FindClose FindFirstFileExW FormatMessageW FreeEnvironmentStringsW GetCommandLineW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileType GetFinalPathNameByHandleW GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetQueuedCompletionStatusEx GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitializeSListHead LoadLibraryA MultiByteToWideChar PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency ReadFile ReadFileEx ReleaseMutex RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetConsoleTextAttribute SetFileCompletionNotificationModes SetFileInformationByHandle SetFilePointerEx SetFileTime SetHandleInformation SetLastError SetNamedPipeHandleState SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile WriteFileEx lstrlenW

ws2_32

WSACleanup WSAGetLastError WSAIoctl WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv select send setsockopt shutdown

ntdll

NtCancelIoFileEx NtCreateFile NtCreateNamedPipeFile NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

userenv

GetUserProfileDirectoryW

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

vcruntime140

_CxxThrowException __C_specific_handler __CxxFrameHandler3 __current_exception __current_exception_context memcmp memcpy memmove memset

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _c_exit _cexit _configure_narrow_argv _crt_atexit _exit _get_initial_narrow_environment _initialize_narrow_environment _initialize_onexit_table _initterm _initterm_e _register_onexit_function _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type exit terminate

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-math-l1-1-0

__setusermatherr floor fmod pow

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Name

.text

Size

9.0MB

Virtual Size

9.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.3MB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

737KB

Virtual Size

736KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

617B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

55KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-21_9aee19a4fe63967702b571ccafb385dd_akira_cobalt-strike_glassworm_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ws2_32

ntdll

userenv

bcryptprimitives

bcrypt

advapi32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic