e0b10d2845e42a54f249e29d35a69e91e8c64e5ebe7433cbe4286d1517ed668c

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 02:37

Target
2026-10-22_f2ef3b38cdfa4299fdee26c107cbbc7c_akira_cobalt-strike_rusty-stealer_satacom.exe
Size 16.6MB
Sample261023-c4jf6acb37
SHA256 e0b10d2845e42a54f249e29d35a69e91e8c64e5ebe7433cbe4286d1517ed668c
MD5 f2ef3b38cdfa4299fdee26c107cbbc7c
SHA1 c42a813f815c5f6c0890927148f6e4e6e57dcd5e
SHA512 7c4e06fb915c34f9d4535a9e9dec1577f83f5ce6a4aa51f339e01d3fe8cd8c7ec39807124fed8950061026b34f22e0b7f9213e26f94138855187046ca929188e
SSDEEP 196608:uyu5NNUL4KfQKZUC48ykHmIoLRCkd3oySmebIxtzlIdbX736:upnNcQ0JHmFLRCkdY9mbVUbX7q
TLSH
T1B4079E83D3D499E9CC19EE7D824797DAF405F0051662A6E28FAE8A353D73F014D08EB9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3116	2026-10-22_f2ef3b38cdfa4299fdee26c107cbbc7c_akira_cobalt-strike_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_f2ef3b38cdfa4299fdee26c107cbbc7c_akira_cobalt-strike_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_f2ef3b38cdfa4299fdee26c107cbbc7c_akira_cobalt-strike_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:3116