General
- Target 2026-10-22_7e9cb8094beb55dde151f8e6e69c644f_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 11.6MB
- Sample261024-h5d6qaee37
- SHA256 adba5e29645b149e845373106eef409f530a572b628026b5ae97c1281bda5ddb
- MD5 7e9cb8094beb55dde151f8e6e69c644f
- SHA1 058534b9b4138ca57e37019008811f805f3f6ca6
- SHA512 0481740dd03226bd7b0f26a034b753f83dcf00fe4b199efe126a5c441f333413ae9b0fa8d2bbd8445da7d8952ac1143dd158a06c8e93b39437f22c94176b8fb3
- SSDEEP 98304:7flP0m8j3BpxpzRdqU5bmlivGL6tDZe4fk1uqo+U0PQHksP+ju8p5H+dQxR2S5jn:9Enkck1s+ZQH8CM5J7BNn+vLwB
- TLSH T1D6C6AE07F25481F4C49EC2B8C36B9633EA32B889452472AF57F45B122F2BB606F1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_7e9cb8094beb55dde151f8e6e69c644f_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_7e9cb8094beb55dde151f8e6e69c644f_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_7e9cb8094beb55dde151f8e6e69c644f_akira_cobalt-strike_glassworm_rusty-stealer_satacom
- Size 11.6MB
- SHA256 adba5e29645b149e845373106eef409f530a572b628026b5ae97c1281bda5ddb
- MD5 7e9cb8094beb55dde151f8e6e69c644f
- SHA1 058534b9b4138ca57e37019008811f805f3f6ca6
- SHA512 0481740dd03226bd7b0f26a034b753f83dcf00fe4b199efe126a5c441f333413ae9b0fa8d2bbd8445da7d8952ac1143dd158a06c8e93b39437f22c94176b8fb3
- SSDEEP 98304:7flP0m8j3BpxpzRdqU5bmlivGL6tDZe4fk1uqo+U0PQHksP+ju8p5H+dQxR2S5jn:9Enkck1s+ZQH8CM5J7BNn+vLwB
- TLSH T1D6C6AE07F25481F4C49EC2B8C36B9633EA32B889452472AF57F45B122F2BB606F1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Suspicious use of SetThreadContext