Analysis

  • max time kernel
    149s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/10/2026, 17:22

General

  • Target
    2026-10-21_90df8b8cfa8909756d8af2f40fc6fddb_akira_cobalt-strike_glassworm_rusty-stealer.exe
  • Size 32.7MB
  • Sample261022-vxtmnadz7x
  • SHA256 e66b48bf498f100f740ef5c386ea2e2056737bbbcecc128e24afcc81818d6cc3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-21_90df8b8cfa8909756d8af2f40fc6fddb_akira_cobalt-strike_glassworm_rusty-stealer.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-21_90df8b8cfa8909756d8af2f40fc6fddb_akira_cobalt-strike_glassworm_rusty-stealer.exe"
    1⤵
      PID:2200

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-0b81cc6d2651416582beaeb0cc00074f\meeting-vault.db-wal
          • Size 462KB
          • SHA256 f218f5dfdb9e7a16b933ba56a2d905b08d261265998e7db52990ae53778687d6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-0c48af88eb4c4d878e2d8083d942fb17\meeting-vault.db-wal
          • Size 209KB
          • SHA256 2b4a83616f0953172737ae8afee3d100cb9654bea0e37d3a5ceeec3121ce1c59
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-131c512680cc4caf95744b759edd79d7\meeting-vault.db-wal
          • Size 229KB
          • SHA256 32db9085577edafbe6e45236f72abe7d5fd93053f074d0c46d2cba7751aa8728
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-13284497ad644ebba9f9f3a9f6f4b135\meeting-vault.db-wal
          • Size 201KB
          • SHA256 8e7c1f0f518ce37aea0ea46032c01cfe3953fb78112e8f094bd512ff60923c59
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-13e93d1e5b7b4bc7a2bf70474e29cdf7\meeting-vault.db-wal
          • Size 261KB
          • SHA256 621b8878f5b0b71a9f57d9d3a6e014e3f81f0580cf5ae2c1dfd2b491817cf605
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-2860b2872e0344abab7361423570bfef\meeting-vault.db-wal
          • Size 257KB
          • SHA256 e727bca9e34c5152514f687b6787cc84c4a373377b0708570707ef4153873c21
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-35565dd187634ed2b2cd147976003a3b\meeting-vault.db-wal
          • Size 309KB
          • SHA256 b74794f809d28c1669d7c091eb443b8b31a2c32cd3936f25722a2fd4bd896d95
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-3fb1bb58afef4dd3a90a84d5d56f2c4c\meeting-vault.db-wal
          • Size 366KB
          • SHA256 91a893d5588ab7cb531be61db057a396492b93ccab7f1eb59a2fbe4172bc10a7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-528038f131164eea8e8e845a5977aca9\meeting-vault.db-wal
          • Size 293KB
          • SHA256 2ba162f8ca6ae343f9ba180e7b77b45fa113fe4c356c268baa980cefd2491f88
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-5337eb7e6c8f4726b51d3cfce5706f07\meeting-vault.db-wal
          • Size 201KB
          • SHA256 d5eea958ba4b63e36e193a40989ae28dc0c65ce54f2ed6e63d547357331407ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-54ab040d55e14cd5b9c73bf29f8935ce\meeting-vault.db-wal
          • Size 309KB
          • SHA256 e47b9e5aabeb778966283b921532c6ef852c5ba7a603b7493deb35964ba134e8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-61e68fd4ec4b425bbac08bd1ec1db88f\meeting-vault.db-wal
          • Size 269KB
          • SHA256 576f3808916c0c3951a7a2a076a447d1746956698d7e2b1b82b30502adca5d35
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-71a780d0261b410d9689f31721c56907\meeting-vault.db-wal
          • Size 482KB
          • SHA256 1406300040b3fde3bb8c37086f862fca36c1e4f22ac55d6273551466339c6546
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-792acac9b1dd479cbdcd2cbc18aa8655\meeting-vault.db-wal
          • Size 350KB
          • SHA256 5847a0c2a4d227ad0ff757b1fd4310fe5012b492d6fc0faaaaaad2b0e41db9ad
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-7956755724994732bb5f4824e92147e7\meeting-vault.db-wal
          • Size 156KB
          • SHA256 a202f4b552510d0b3ccd2360f2d7a10eb5bc5b7ed8f7dca7fefc9c2d53dbde67
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-82dce2b4667c4281adef11c02b0f7ca6\meeting-vault.db-wal
          • Size 342KB
          • SHA256 39bd3e5fedb43a09fc9840316e1774f4b6eb7c46837be21bed3a3ace0974f6bf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-882dc986591b4b059c773ed1d4dc442a\meeting-vault.db-wal
          • Size 390KB
          • SHA256 de6a60b0696845b245f0d385097b5ca8b035ed4f6437dca85c5256cdbde182a8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-8ada2453505f4638b2b7f3b3354f5d60\meeting-vault.db-wal
          • Size 430KB
          • SHA256 caebc0c995793539b892d0d2a171e38a5e2dced08ddf11b1df73a79215bcbc9f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-906ca141078c4241a4b408237bf9a9ee\meeting-vault.db-wal
          • Size 201KB
          • SHA256 e8b4c54f1d756e3564296917eac744e91a82219e7f8170077dabdfab2a9a32e9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-974b1a72555b496e904ecc9270adfb17\meeting-vault.db-wal
          • Size 177KB
          • SHA256 5bce74074bad553f504d6ff1a9dae27b85d3c6522156109e1bbeb3586e460930
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-9ae5c001dbe642f98993de445ca553d6\meeting-vault.db-wal
          • Size 197KB
          • SHA256 3459c85cd14a30f8f97d26de740190eecb96a43443790114689f7b38896c9b2e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-9c340228cacd4badaa44d441fabfc35b\meeting-vault.db-wal
          • Size 265KB
          • SHA256 9eda6d231a8b400ff9b4cd05ded9f5c9c22c00ceb37b63d6878d0067d27118f5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-9f8c901866954a768a79e157235ba426\meeting-vault.db-wal
          • Size 309KB
          • SHA256 57b133490cc5c8ee202b90c07976f849921569e2102d1734ec16206c5c608959
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-a7f71c6052314e28924ef630a0c07411\meeting-vault.db-wal
          • Size 269KB
          • SHA256 8b2f519bd37cc1f89c4cf81cc119c3d94b574e527083d17906c6c77ffec8a9ff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-aaaf12ef045f493c8046935db5b687e6\meeting-vault.db-wal
          • Size 213KB
          • SHA256 86460beca2fd19fff9103446bee0280e6d89ce2b1fcc26c7a9f4725a9ff90dc2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-ba4dee51ebd84079b60a089fc482c422\meeting-vault.db
          • Size 588KB
          • SHA256 39b6bf73d3b0af15cffb98f0635586b1f2b077d57e390afe8650cd36334b0838
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-ba4dee51ebd84079b60a089fc482c422\meeting-vault.db-wal
          • Size 3.9MB
          • SHA256 85c8107687df6986c4b868705968c6cfba8560913f2f7b57dc01a3af29f7a2f7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-bc1fc8494c374cbc81b557b0ae62d453\meeting-vault.db-wal
          • Size 217KB
          • SHA256 b1fbba99eeaaaa85c60782c4ef43d00aecb4805c7bba3886cbc098c9e3991f36
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-c06e20ff14174449a9e7d89636520c37\meeting-vault.db-wal
          • Size 430KB
          • SHA256 3dde59be8c134e2bc872b1ca823ab322b8ef41c68c268619a3747bb6c57d0201
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-ceffa6ddcd9c4cb48dc1fa8697817482\meeting-vault.db
          • Size 488KB
          • SHA256 f1a76807e3d8ca3ccf824a5aba25f3fb1fef6477cf528aaff5b778d908d6ecba
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-ceffa6ddcd9c4cb48dc1fa8697817482\meeting-vault.db-wal
          • Size 221KB
          • SHA256 fb7bdcef8c4fd5ade1f44fc620678419ea5e7db347c42d1cba2a066bc16317fe
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-e659c6c55b5a4604adef3499e1afb610\meeting-vault.db-wal
          • Size 350KB
          • SHA256 8570a29a15c70e50fc4a623e50f24e0e93135b8421c41f83c7e985dd39efa032
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-ea7cb15777c74fdf875bf080c0cf500a\meeting-vault.db-wal
          • Size 245KB
          • SHA256 6ecbeb79306914df15cf715ab745d6799ecde81f281abf63c66fab967d520837
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mv-template-db-44-d02123b9b896174a.db

          • Path C:\Users\Admin\AppData\Local\Temp\mv-template-db-44-d02123b9b896174a.db
          • Size 488KB
          • SHA256 a6d47122129a6dde6e52ebdb6332dcc3c75e350ed8274a6c54a4b3ed1777cf2c
          • MD5 SHA1 SHA512 SSDEEP TLSH