2026-10-25_815e170e7fd91b78057aac6708e28c2f_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_815e170e7fd91b78057aac6708e28c2f_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 1.1MB
Sample261026-121jnagy6t
SHA256 6af1fde01d0c6cc141fdcdb1b8f7124d2e898c9f2bdc50c026695ad5118161c3
MD5 815e170e7fd91b78057aac6708e28c2f
SHA1 c30eec3fc9dd99ea9b750f665c327b3f74385599
SHA512 fe1c99e6242958281fc6af2fd979f3fd5fcff0f1bcc14772cd5dbf6d5ecb0305aab29d24ad9feaabd516a2a9902d510b86a082667391f90705a00d0ce1b87f17
SSDEEP 24576:QzpFCRGtaYbl9Qni1i2BUiFMnLLA5YM+Omv55Qy:QzpFuoQi1i+UiFOI5YMNm
TLSH
T13145F716666965E9C17BC0B8C2938F62B93230C90B356FF745D1827A2F25EF96E3C314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_815e170e7fd91b78057aac6708e28c2f_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-10-25_815e170e7fd91b78057aac6708e28c2f_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 1.1MB

2026-10-25_815e170e7fd91b78057aac6708e28c2f_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 260c2d1735a44b3e7fba41c2c1b5b41f
SHA256 6af1fde01d0c6cc141fdcdb1b8f7124d2e898c9f2bdc50c026695ad5118161c3
MD5 815e170e7fd91b78057aac6708e28c2f
SHA1 c30eec3fc9dd99ea9b750f665c327b3f74385599
SHA512 fe1c99e6242958281fc6af2fd979f3fd5fcff0f1bcc14772cd5dbf6d5ecb0305aab29d24ad9feaabd516a2a9902d510b86a082667391f90705a00d0ce1b87f17
SSDEEP 24576:QzpFCRGtaYbl9Qni1i2BUiFMnLLA5YM+Omv55Qy:QzpFuoQi1i+UiFOI5YMNm
TLSH
T13145F716666965E9C17BC0B8C2938F62B93230C90B356FF745D1827A2F25EF96E3C314
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

855920

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-d225b4acb7e9436e.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

GetSystemTimeAsFileTime CloseHandle GetProcAddress LoadLibraryA GetNativeSystemInfo CompareStringOrdinal GetLastError WaitForSingleObject FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult FlushFileBuffers GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess InitializeSListHead CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW CopyFileExW FindFirstFileExW FindClose CreateHardLinkW ExitProcess WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex DeleteFileW HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetModuleHandleW FormatMessageW GetModuleFileNameW WaitForMultipleObjects GetTempPathW FindNextFileW SetUnhandledExceptionFilter GetStdHandle GetModuleHandleA

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW RegEnumKeyExW

ole32

CoInitializeEx CoCreateInstance

oleaut32

SysFreeString SysStringLen

ntdll

NtReadFile NtCreateNamedPipeFile NtWriteFile RtlNtStatusToDosError NtOpenFile

vcruntime140

__current_exception __current_exception_context _CxxThrowException memset memcmp memcpy __CxxFrameHandler3 memmove __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type _crt_atexit _configure_narrow_argv _register_onexit_function _get_initial_narrow_environment _initterm _initterm_e exit _exit _initialize_onexit_table __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback terminate _initialize_narrow_environment _cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_815e170e7fd91b78057aac6708e28c2f_akira_cobalt-strike_glassworm_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic