2e7d52cf6dee98caf060486ddd6dab5f0119c49cb338205d77c8a3dfd7562087

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 14:55

Target
2026-10-23_16b669aa715da97c3247cf1b11743a17_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 17.4MB
Sample261023-saffeaywax
SHA256 2e7d52cf6dee98caf060486ddd6dab5f0119c49cb338205d77c8a3dfd7562087
MD5 16b669aa715da97c3247cf1b11743a17
SHA1 532bd4816a154343015be7fbcd7eee6172a68758
SHA512 6554085fa7be6726136db492a92dbc5ebda487bff3c1fd0660350f52a9f773d4b719ae7e75b40a507fe2448b0a374ba5b9c5345fc149f4d85d993c09ea8762d4
SSDEEP 196608:ry33tjED6xgTYNIcbzzv7sdIjAYRt2ysfRc29UUcYyA2T3H0F:GYWWYewEdcP2rMUcY72DH
TLSH
T1E207D043F292D2FCC015C074D24662B3FAA6BC490B3575EBABC44A217E71EE0DA39756
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4640	2026-10-23_16b669aa715da97c3247cf1b11743a17_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-23_16b669aa715da97c3247cf1b11743a17_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-23_16b669aa715da97c3247cf1b11743a17_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4640