General
- Target 2026-10-22_1096026ac80d1ac23d990e6dc4918268_akira_cobalt-strike_rusty-stealer_satacom
- Size 1.2MB
- Sample261024-1cldfaes9j
- SHA256 b98af347c2e7f4169d52cbaca3eab17a90c8acb427961a988330a882be915073
- MD5 1096026ac80d1ac23d990e6dc4918268
- SHA1 56aaf7485905592372651b39a48ec1b7a110c31e
- SHA512 9a491e9de76bacb0b97a4cd50146e19c63fa4bdc60cf66b8add3a7b278c5a4c0872a9f5e43e6bdd35434b163ce9c4596172d7d1d338e84d8291858a019ec8ef2
- SSDEEP 24576:Fm+GnKuKvV6+CtEVXXC8Ac2YV3swxhZPegenZPwC7:hGnKZsAWh4sCdegmZz
- TLSH T1C445BF43F94685DCDA6EC07D871681326632B88947306AFB21946F3C3E6BDD61E7E324
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_1096026ac80d1ac23d990e6dc4918268_akira_cobalt-strike_rusty-stealer_satacom.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_1096026ac80d1ac23d990e6dc4918268_akira_cobalt-strike_rusty-stealer_satacom
- Size 1.2MB
- SHA256 b98af347c2e7f4169d52cbaca3eab17a90c8acb427961a988330a882be915073
- MD5 1096026ac80d1ac23d990e6dc4918268
- SHA1 56aaf7485905592372651b39a48ec1b7a110c31e
- SHA512 9a491e9de76bacb0b97a4cd50146e19c63fa4bdc60cf66b8add3a7b278c5a4c0872a9f5e43e6bdd35434b163ce9c4596172d7d1d338e84d8291858a019ec8ef2
- SSDEEP 24576:Fm+GnKuKvV6+CtEVXXC8Ac2YV3swxhZPegenZPwC7:hGnKZsAWh4sCdegmZz
- TLSH T1C445BF43F94685DCDA6EC07D871681326632B88947306AFB21946F3C3E6BDD61E7E324
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1