Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/10/2026, 17:22

General

  • Target
    2026-10-21_90df8b8cfa8909756d8af2f40fc6fddb_akira_cobalt-strike_glassworm_rusty-stealer.exe
  • Size 32.7MB
  • Sample261022-vxtmnadz7x
  • SHA256 e66b48bf498f100f740ef5c386ea2e2056737bbbcecc128e24afcc81818d6cc3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-21_90df8b8cfa8909756d8af2f40fc6fddb_akira_cobalt-strike_glassworm_rusty-stealer.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-21_90df8b8cfa8909756d8af2f40fc6fddb_akira_cobalt-strike_glassworm_rusty-stealer.exe"
    1⤵
      PID:3400

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-0c42e53e61f7483086e39d8999ecd85e\meeting-vault.db-wal
          • Size 390KB
          • SHA256 f4a5ad7353aec9ecffe79e198948e4850d9ad3e48acf22e3b46994043d04d81d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-2e2d6cf84b51459e9b27a41e412de351\meeting-vault.db-wal
          • Size 350KB
          • SHA256 004cc4aa3377bd989d8f5a6406a4ac3072cc2e0529b7b0bddd1408a9682a8a72
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-2fe256ce9ee04d3d9123732533736044\meeting-vault.db-wal
          • Size 177KB
          • SHA256 fdb7c8fe4fa8511b960285928a0732e922a9479da98f910e6fe873b22b4ff938
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-368bd5f040b7477eac86bde876d94496\meeting-vault.db-wal
          • Size 309KB
          • SHA256 555f3a817e9bb9b53bc326462125a4ebbda44183518fd3a4d45263096fe4b32a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-3e7a7571d3594ff2be0f7e1e8064bf6c\meeting-vault.db-wal
          • Size 201KB
          • SHA256 1885186dd63c0ba81e71f67a065e5c3d3bc7c0bde7019059fdf9e08a998128d9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-5859ae9d96ef407eba698e6d0f4d5b67\meeting-vault.db-wal
          • Size 229KB
          • SHA256 8fc8579c4e0e53d42963b6dfc2c5536b230de564b73441ca47d122b216079c16
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-5a360e0f5b5c47d8b56606442c6d405f\meeting-vault.db-wal
          • Size 261KB
          • SHA256 1ea9d9d8e830f26a42e89e9591a6a60da454858af0c5f623eedde8dd7e3421fd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-5a3724decd1f4a398a065644610f5fcc\meeting-vault.db-wal
          • Size 213KB
          • SHA256 bafb9865820a4763055298b4ef10741e7e095c79ea007b2c6184d143f446dbf6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-5cc09f21b5b94fd7a10b4e678e71510a\meeting-vault.db-wal
          • Size 350KB
          • SHA256 d4a88896a28398c281afd8e4cf0bb53526d152c8e99b8bfca65af5e3e8f966c0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-61616af9242f4364a1dc65593a7a6bcd\meeting-vault.db-wal
          • Size 257KB
          • SHA256 58307c7e3a94c72c69093da77bf7e53e92ef9be78c956182d7dee7234e2a20ef
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-69a30808792046448c006637ecff8ee7\meeting-vault.db-wal
          • Size 430KB
          • SHA256 adf2c9ab89f3c989631e2861183d87fe9e276f9940a72ed2fc8072919ff02dda
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-7004bd016a484539b4217ee500370bdb\meeting-vault.db-wal
          • Size 269KB
          • SHA256 c6a7b8a9dcd5cb6fb801ff486e639b7369a6166872d6c7678680b0da3019e97d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-7412346397f24569a0dcb0fac4524cb3\meeting-vault.db-wal
          • Size 221KB
          • SHA256 b54cbe60feb0121a989e985e56bf2fc165b8972471264bedc7ef8a72318d519d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-74fdde5d502647e7918412c2e34240a0\meeting-vault.db-wal
          • Size 482KB
          • SHA256 3839c96398bcf31fe74fb1608cb9c922244cee881dac87c62a95454ffdc72845
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-7a952a357d074794b88c79e0d17a02f4\meeting-vault.db-wal
          • Size 462KB
          • SHA256 f015ecf10a3903736f5c092090e581ecfccc55e0efad556299a6a054d4cbd665
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-7b481dfbca0b487c8b303678583fe28d\meeting-vault.db-wal
          • Size 217KB
          • SHA256 8a3941d1b88bc9b2e60f6d1eab4cfc8abeb832c269008473e9ea9a78f1690c2d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-82d8adf8099b453cac5bf62d4e9dc03d\meeting-vault.db-wal
          • Size 201KB
          • SHA256 209839d0eb74edbda67fce893e2f20ae1ba9a1975def17988f4bd34815b28c6a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-8766230acf4446c39410026505c4491a\meeting-vault.db
          • Size 588KB
          • SHA256 3990e897a69bb7f0dbb598d16c5e98b2b4352f0c5694c6a6d877b8b470b0f63f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-8766230acf4446c39410026505c4491a\meeting-vault.db-wal
          • Size 3.9MB
          • SHA256 8b46e32f4d480dd31c02267458e4aa3ca1afe12e85182f5d703da87be278c313
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-9b959ce0e89e4891b5d937051056d2eb\meeting-vault.db-wal
          • Size 209KB
          • SHA256 dd7856a7340621e7328fca6e2e50ca0c69461a7b4edff6a195e61980b16d5c7c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-af7d9c0321114f60b108b0cbec44a873\meeting-vault.db-wal
          • Size 293KB
          • SHA256 a65e40d9cb178a045a19b5b22804b209098d15a38a28da8f3b97087bfd99e398
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-b1c9136cab2442bcb0a0b995a82fa83b\meeting-vault.db-wal
          • Size 245KB
          • SHA256 5be74ad3fcacc368a32bb7d8dba2bab00dcda46cc0198b4cf259d87b3202009b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-b7f39d3befd247b08b0d1324a21afcec\meeting-vault.db-wal
          • Size 309KB
          • SHA256 f8e3c67455001530e17dad9f3201ac1daf2be669a6fec08ba21bdfd602e36969
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-b84ee606360e49caadc2b4f9b3d82f18\meeting-vault.db-wal
          • Size 225KB
          • SHA256 e623c2e6e6e99c5e0d52ec85b1b4dd3813223209daf6f746a8439a06227db1f4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-b86663476df74dd59822e25c5e23b9c9\meeting-vault.db-wal
          • Size 366KB
          • SHA256 85a3f444933ca6bdef132a977bae6c2d4257f6521f1fa5ac118cceb87f3f76ca
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-cf682b9803fd4586b0a64afbb42bbdd3\meeting-vault.db-wal
          • Size 430KB
          • SHA256 2a9fbe22644ea75f5609f73bec43ea76f2ec1ee97630084f4405f17f92700a7b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-d4a0cf582feb49d683dfad8d380e9f93\meeting-vault.db
          • Size 488KB
          • SHA256 4ecf090421261db1e4cf276b69b64fdb6f0112c266595834d59c24499923c056
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-d4a0cf582feb49d683dfad8d380e9f93\meeting-vault.db-wal
          • Size 265KB
          • SHA256 80b496930c78fa36f09b687744e80725c3769bcbef7b8cec227e09727b460efd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-da4e31948dfb434e8bf7a3ead6d1a857\meeting-vault.db-wal
          • Size 342KB
          • SHA256 3982e601a3ad87a48c39eeff608d0280f301ee2f7a683123039cb72849564c39
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-dbb6ed4f8c054b8dbdc57150b81f96a8\meeting-vault.db-wal
          • Size 156KB
          • SHA256 c5f76770541de53b6653089675a945c8aa065ccae7110f4affc5752ec4172285
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-eb67d6fa005c481c911ed668e2f38119\meeting-vault.db-wal
          • Size 309KB
          • SHA256 580aca1bfdfd54b5a7f100565bd97c9b9523fd7b2a25cb3f03c2009d42192086
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-f28e6ac0d2e641eeada6c31fd973a601\meeting-vault.db-wal
          • Size 269KB
          • SHA256 8b5dfcf748b549dad625b1fd47ffc3f66689460336a06e6ef98946d59ea4d2d2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          meeting-vault.db-wal

          • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-ff65d671821040239e2e646360b26942\meeting-vault.db-wal
          • Size 201KB
          • SHA256 3c44330c79069b6b1c99d6a90dc3a42838ecc338721045661ccad02b3a806ce0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mv-template-db-44-d02123b9b896174a.db

          • Path C:\Users\Admin\AppData\Local\Temp\mv-template-db-44-d02123b9b896174a.db
          • Size 488KB
          • SHA256 6b548d202d17a039d2db319a9852a734d43b98e24bf2b9bb3d9d3532200654b2
          • MD5 SHA1 SHA512 SSDEEP TLSH