85c9946a8c0b7f4f12d616c307eaee513f96a75b509da6492aea5f3212defc3f

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 10:21

Target
2026-10-23_80c7cb8aa46fd54f091181d222b3c766_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 17.4MB
Sample261023-mdv3daaz91
SHA256 85c9946a8c0b7f4f12d616c307eaee513f96a75b509da6492aea5f3212defc3f
MD5 80c7cb8aa46fd54f091181d222b3c766
SHA1 d417e5e4775a630ab186b4ffe772ad1a7483f316
SHA512 03432e28cbb9f1ab559b8fc6a66cdc21e2ff2b90adace407895244c05337bdea58dbecbbd6a71d629e20c4bde4718de507e472c9224af554020e4432386a65ba
SSDEEP 196608:ry33tjED6xgTYbIcbzzv7sdIjAYRt2ysfRc29UUcYyA2T3H0F:GYWWYMwEdcP2rMUcY72DH
TLSH
T12407D043F292D2FCC015C074D24662B3FAA6BC490B3575EBABC44A217E71EE0DA39756
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5968	2026-10-23_80c7cb8aa46fd54f091181d222b3c766_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-23_80c7cb8aa46fd54f091181d222b3c766_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-23_80c7cb8aa46fd54f091181d222b3c766_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:5968