Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/10/2026, 10:10

General

  • Target
    2026-10-22_68eac99a859074a07b611dbaff9095c2_akira_cobalt-strike_rusty-stealer_satacom.exe
  • Size 15.2MB
  • Sample261024-l7lv5ahs4v
  • SHA256 2328f430faf3d158f259361414b54b8110bd5e45f1f98287bbbef8f7355ac8de
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-22_68eac99a859074a07b611dbaff9095c2_akira_cobalt-strike_rusty-stealer_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-22_68eac99a859074a07b611dbaff9095c2_akira_cobalt-strike_rusty-stealer_satacom.exe"
    1⤵
      PID:4900

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          .syncliva-root

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpDT9VAb\.syncliva-root
          • Size 146B
          • SHA256 94d54368480134b1afa74a943971eeeb337d57c21952d92a6df9e03f4ae0f347
          • MD5 SHA1 SHA512 TLSH

          notes

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpDT9VAb\notes
          • Size 3B
          • SHA256 cba06b5736faf67e54b07b561eae94395e774c517a7d910a54369e1263ccfbd4
          • MD5 SHA1 SHA512

          .syncliva-root

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpHh21uv\.syncliva-root
          • Size 146B
          • SHA256 20fc7d768fb1855f1e73b4e80db8f8e4f31317a8188eae86404b702cf4eb6491
          • MD5 SHA1 SHA512 TLSH

          .syncliva-root

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpPRyZCv\.syncliva-root
          • Size 146B
          • SHA256 f3c9991e1a0a006af9975937dce090d84efa219fb12a0fc5c0e41f160dfaa8d4
          • MD5 SHA1 SHA512 TLSH

          new

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpPRyZCv\nested\new
          • Size 3B
          • SHA256 11507a0e2f5e69d5dfa40a62a1bd7b6ee57e6bcd85c67c9b8431b36fff21c437
          • MD5 SHA1 SHA512

          .syncliva-root

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpZtk2bc\.syncliva-root
          • Size 146B
          • SHA256 1674bbd566976cbdc17a8752eeea2f1457f279b8923c85dead9d84803ee422cf
          • MD5 SHA1 SHA512 TLSH

          notes

          • Path C:\Users\Admin\AppData\Local\Temp\.tmpZtk2bc\notes
          • Size 13B
          • SHA256 280bef2602b7a9113a7e9092e00266d09adea4036cafdb096e0ccaff9d893c41
          • MD5 SHA1 SHA512