Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/10/2026, 11:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
- Size 17.3MB
- Sample261023-m47h4acf79
- SHA256 021d69a7c2e5bd20cb72b66daca5134ddbb712fa54bc69d1fd03e4ca0766e624
- MD5 6f0011d74f369e11f85673f7e576469e
- SHA1 4b7586deab419ae87ea3909d90e463f2b29cb8b8
- SHA512 4cf1e0dd23cbb142151ecb1e7a4f6071403cb2584f7a8e99aecb4b654c053661452a81f693e3ca999e07913fd81937a39662c6f1dfab0443d6c8932be85ed929
- SSDEEP 98304:WJGgMgePPg7H4k9dZXZBVOR3N/YNCAHLB5K48yRsqimLeWt+Ud32BtGEiFoz7k7Z:Gx/H48x9nHHN5jRVvsUljfuXsPZQ
- TLSH T1DC072912FA9B54ACC05AC4B483464A339A3274CB2B3579FF65D881743FE9BE05E38719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Suspicious behavior: EnumeratesProcesses 34 IoCs
pid Process 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe 2428 2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-23_6f0011d74f369e11f85673f7e576469e_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2428
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\gameplay-overlay-gate-tests\offset.log
- Size 207B
- SHA256 d818100efc8eaccfc47f1995b0da2cc101fb4bca499783fc0be4db2fae760d75
- MD5 6690a15de447558883903cc8028bba62
- SHA1 37f8ebee5e58a9ccf955feff69b20b539e25c808
- SHA512 93be6b20cc927bb79d1cfecaef171e6ec559c83d23a6f3dd4f28243a3f2d11b36966d31780e3e60a39c99d2271f3f6a29d600f014ba7ceb4f74b6e2fce13a00c
- TLSH T1CCD023CD11DD7C7DC110CE1C70312FC93B1515345EE401341D4DD23940DDD926F00955
- MD5 SHA1 SHA512 TLSH