General
- Target 2026-10-23_94c3b80948014668fd8972ad0b6b11ef_akira_cobalt-strike_rusty-stealer_satacom
- Size 20.6MB
- Sample261023-llgpaaay81
- SHA256 98cb534ae55407eb587adf650ffb1f5b575922625a2ddb8e8cd251331e675050
- MD5 94c3b80948014668fd8972ad0b6b11ef
- SHA1 6494eb2b157acb3e54434ca4345b86500f8656d5
- SHA512 89e22afc0e7f44f62e5ecb4237b754d710d94ad631075a68b04f3fd359afa51bc5a009bbe2ac21f21b9aca81ff3df8bca90d62750ab6d326d69a52aba18bf9bc
- SSDEEP 98304:0vVIedVXc4E71os3yBwB6skwh4/H23elB7UcGXE1h7S7+nzYm7iKGmQSS5OXtCIQ:5eXo1xCURkwhXOfUaA3mRoB
- TLSH T11827C4256679649DD2BAC0B8D2878F22AE2170DD07393FF745D082762F24EF8A93C754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-23_94c3b80948014668fd8972ad0b6b11ef_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-23_94c3b80948014668fd8972ad0b6b11ef_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_94c3b80948014668fd8972ad0b6b11ef_akira_cobalt-strike_rusty-stealer_satacom
- Size 20.6MB
- SHA256 98cb534ae55407eb587adf650ffb1f5b575922625a2ddb8e8cd251331e675050
- MD5 94c3b80948014668fd8972ad0b6b11ef
- SHA1 6494eb2b157acb3e54434ca4345b86500f8656d5
- SHA512 89e22afc0e7f44f62e5ecb4237b754d710d94ad631075a68b04f3fd359afa51bc5a009bbe2ac21f21b9aca81ff3df8bca90d62750ab6d326d69a52aba18bf9bc
- SSDEEP 98304:0vVIedVXc4E71os3yBwB6skwh4/H23elB7UcGXE1h7S7+nzYm7iKGmQSS5OXtCIQ:5eXo1xCURkwhXOfUaA3mRoB
- TLSH T11827C4256679649DD2BAC0B8D2878F22AE2170DD07393FF745D082762F24EF8A93C754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (188) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.