Overview

overview

3

Static

static

3

2026-10-23...om.exe

windows10-2004-x64

1

2026-10-23...om.exe

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/10/2026, 12:12

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-10-23_550a8f2a6fa57856059f574832ff34e9_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
  • Size 15.8MB
  • Sample261023-pc5ljaxyft
  • SHA256 c4ee858f67cbe174dcfb4dcf3481acead238594ee85594ce6af783131ad01ae4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-23_550a8f2a6fa57856059f574832ff34e9_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-23_550a8f2a6fa57856059f574832ff34e9_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4940

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .meeting-vault-models
        • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-2226a9052ec8406caeeabb7be26bf1a6\picked\MeetingVault Models\.meeting-vault-models
        • Size 5B
        • SHA256 d9298a10d1b0735837dc4bd85dac641b0f3cef27a47e5d53a54f2f3f5b2fcffa
        • MD5 SHA1 SHA512
        Submit Download

        a-file
        • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-232c35d960da4e1ca09d0af25d6dc837\a-file
        • Size 4B
        • SHA256 79f076abdd19a752db7267bfff2f9022161d120dea919fdaca2ffdfc24ca8c96
        • MD5 SHA1 SHA512
        Submit Download

        .meeting-vault-models
        • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-232c35d960da4e1ca09d0af25d6dc837\external\MeetingVault Models\.meeting-vault-models
        • Size 4B
        • SHA256 ae0bec9e9d33c56354bd612c8a6010840324fc5b9786ce0a18b696b304b09397
        • MD5 SHA1 SHA512
        Submit Download

        unlisted
        • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-4d182d37b2734e32a0ec2c96b028fc1b\source\unlisted
        • Size 10B
        • SHA256 353b21aeeb279074d36ff938701303b343a677cd6380cee35b6e8ab12f2c09a2
        • MD5 SHA1 SHA512
        Submit Download

        model.bin
        • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-98224b332cd44bf7bf0f0958c401d0de\chunks\nested\model.bin
        • Size 2.0MB
        • SHA256 9894227c2ddb433377d6e71695ea85c203eaabb67f7dadedf4ae462d41e715e6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        model.bin
        • Path C:\Users\Admin\AppData\Local\Temp\.mvtest-ef4186dd506d47beaad3c60053c54e63\source\nested\model.bin
        • Size 3B
        • SHA256 2f05d4b689d270cafb02285f35f44866f7dc8a2d368a3f9d1124373eeab31fb1
        • MD5 SHA1 SHA512
        Submit Download

        model.bin.part
        • Path C:\Users\Admin\AppData\Local\Temp\.tmp9nZ92N\models\.staging\test-model@0123456\a1\onnx\model.bin.part
        • Size 292KB
        • SHA256 5bd20ff20e43ffb447d1a4190102f94dc1c0ce2d9538df173740c92d832183d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        progress.json
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpDGOAyZ\models\.staging\test-model@0123456\a1\progress.json
        • Size 38B
        • SHA256 48bfb92d1e50be8ba3bd7b87b543e3fe6aabb08d472c8e5053b6912b2304f880
        • MD5 SHA1 SHA512
        Submit Download

        progress.json
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpDwg3GO\models\.staging\test-model@0123456\a1\progress.json
        • Size 40B
        • SHA256 b7522d38ffb426185f945d8834790bfc4e155bb90c13820ea0e171abab7faa62
        • MD5 SHA1 SHA512
        Submit Download

        tokenizer.json
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpE8fG87\models\.staging\test-model@0123456\a1\tokenizer.json
        • Size 4KB
        • SHA256 d2ee877322d0b81c5334f4316e32ae012327f6fa9f1f8aac676b7b548d0ba9cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        model.bin.part
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpPL2DRM\models\.staging\test-model@0123456\a1\onnx\model.bin.part
        • Size 292KB
        • SHA256 a8179f2e19a50e7373996945238ecc04324191e824cd5688f12d688aaee34d2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        progress.json
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpWxBgKO\models\.staging\test-model@0123456\a1\progress.json
        • Size 40B
        • SHA256 7c33ac5b4c43a4269e6286cffae242aee4b92673942ae89c1c8abb100974ef73
        • MD5 SHA1 SHA512
        Submit Download

        progress.json
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpWxBgKO\models\.staging\test-model@0123456\a1\progress.json
        • Size 40B
        • SHA256 953e1519380105b46b4db6f8eed017a49b175e5aa239ef0d8c2425234a0268ef
        • MD5 SHA1 SHA512
        Submit Download

        model.bin
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpZIxpKB\models\.staging\test-model@0123456\a1\onnx\model.bin
        • Size 292KB
        • SHA256 363ac34889acae5ea565e902cb20b71157bf9edeb37c59af9f554e9619a17891
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tokenizer.json
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpcFJfis\models\.staging\test-model@0123456\a2\tokenizer.json
        • Size 4KB
        • SHA256 87500043de79de4d5ba6284a2b17b89006a45d4fd4df2c192b0e21f54057d190
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        f
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpiKDqqU\f
        • Size 3B
        • SHA256 ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad
        • MD5 SHA1 SHA512
        Submit Download

        progress.json
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpsmKP8L\models\.staging\test-model@0123456\a1\progress.json
        • Size 39B
        • SHA256 eb82af839d8c7bd399935f6d191105b6821caa396b4e03a8857f45b40ab09da9
        • MD5 SHA1 SHA512
        Submit Download

        config.json.part
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpvcEHPZ\models\.staging\test-model@0123456\a1\1_Pooling\config.json.part
        • Size 120B
        • SHA256 66650d7f5d8a267d67b758dc196c419f506989df4170ce565156fa3e4df42028
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        progress.json
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpvcEHPZ\models\.staging\test-model@0123456\a1\progress.json
        • Size 40B
        • SHA256 a2fb89c51ffadc49066a27a54b0c8e8b8c99f28a0c74b71d825ea2dd19ce20ed
        • MD5 SHA1 SHA512
        Submit Download

        tokenizer.json.part
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpvcEHPZ\models\.staging\test-model@0123456\a1\tokenizer.json.part
        • Size 4KB
        • SHA256 3c4418fb5a843493c1302241556d8d96902df6b8a26c2419d9b7490290d7cfb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        config.json
        • Path C:\Users\Admin\AppData\Local\Temp\.tmpwDb3Yo\models\.staging\test-model@0123456\a1\1_Pooling\config.json
        • Size 120B
        • SHA256 5079ddac153865f7bdbc27df554864bb174112ab8f554cb9b29512bea4e3f087
        • MD5 SHA1 SHA512 TLSH
        Submit Download