2026-10-25_7a6ef42c6f45abbb22923aa761668a1e_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_7a6ef42c6f45abbb22923aa761668a1e_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom
Size 20.2MB
Sample261026-236bzag19y
SHA256 bd24caecb8d612eaccc0cc3ff98ed03d7fac72ae11e45261596089a642319fb1
MD5 7a6ef42c6f45abbb22923aa761668a1e
SHA1 568d0e25e1f3f0c15068e5e1e6ef1ffc075ea9bc
SHA512 3b1a67ba5fd27ea8c2c0ee5846916dc04ea5b2f4e9c1acb7300f57984db175d478194abab0309ef539e1e1e4cc43aa84398f2289b6397181c0dad5feea397536
SSDEEP 98304:UieU/JHbQLQ8mOEzA2/1jEZqWhpZD+DXN3MyMZ6xrawjx/O7IzOMNmsrJRTMbH4D:Wtqw6NaQEdHB5bHfO0J+B
TLSH
T1D5276C52B65B98ACE06AC8B0C3069A779E2174CB0726B9FF41C455383F6DBF05B38719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_7a6ef42c6f45abbb22923aa761668a1e_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

File Explorer

2026-10-25_7a6ef42c6f45abbb22923aa761668a1e_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

.exe 20.2MB

2026-10-25_7a6ef42c6f45abbb22923aa761668a1e_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

IMPHASH 5d2fbe81ddd978c5a1d84a75af06f6fa
SHA256 bd24caecb8d612eaccc0cc3ff98ed03d7fac72ae11e45261596089a642319fb1
MD5 7a6ef42c6f45abbb22923aa761668a1e
SHA1 568d0e25e1f3f0c15068e5e1e6ef1ffc075ea9bc
SHA512 3b1a67ba5fd27ea8c2c0ee5846916dc04ea5b2f4e9c1acb7300f57984db175d478194abab0309ef539e1e1e4cc43aa84398f2289b6397181c0dad5feea397536
SSDEEP 98304:UieU/JHbQLQ8mOEzA2/1jEZqWhpZD+DXN3MyMZ6xrawjx/O7IzOMNmsrJRTMbH4D:Wtqw6NaQEdHB5bHfO0J+B
TLSH
T1D5276C52B65B98ACE06AC8B0C3069A779E2174CB0726B9FF41C455383F6DBF05B38719
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14789184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

to_engine.pdb

kernel32

CreateFileW SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx FindFirstFileExW FindClose GetFinalPathNameByHandleW GetFileAttributesW WriteFileEx ReadFileEx GetQueuedCompletionStatusEx SetThreadStackGuarantee FindNextFileW AddVectoredExceptionHandler CreateProcessW CreateIoCompletionPort SetFileCompletionNotificationModes RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SetHandleInformation GetFullPathNameW QueryPerformanceCounter QueryPerformanceFrequency SetLastError SleepEx CreateThread GetModuleHandleA Sleep HeapAlloc DuplicateHandle GetCurrentProcess FormatMessageW HeapFree GetModuleHandleW GetProcessHeap LocalFree GetCurrentThreadId PostQueuedCompletionStatus WaitForSingleObject SetEvent WaitForMultipleObjectsEx SetThreadPriority CreateEventA RemoveVectoredExceptionHandler LoadLibraryExA CloseHandle SetWaitableTimer SwitchToThread CreateWaitableTimerExW ReleaseMutex InitializeSListHead SetUnhandledExceptionFilter CreateMutexA GlobalFree ExitProcess GetCurrentProcessId LoadLibraryA GetCurrentThread GetModuleFileNameW FreeLibrary GetProcAddress LoadLibraryExW SetThreadErrorMode WaitForSingleObjectEx GetLastError GetSystemTimeAsFileTime GlobalLock GlobalAlloc GlobalUnlock MultiByteToWideChar GlobalSize WideCharToMultiByte GetSystemInfo UnmapViewOfFile VirtualProtect CreateFileMappingW MapViewOfFile CompareStringOrdinal GetSystemTimePreciseAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW GetStdHandle GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW SystemTimeToTzSpecificLocalTime GetConsoleOutputCP GetConsoleMode WriteConsoleW lstrlenW HeapReAlloc

advapi32

ImpersonateAnonymousToken RevertToSelf

gdi32

SwapBuffers DescribePixelFormat GetPixelFormat CreateCompatibleBitmap SetBitmapBits CreateBitmap CreateRectRgn DeleteObject GetDeviceCaps ChoosePixelFormat SetPixelFormat

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

oleaut32

SysStringLen GetErrorInfo SysFreeString SetErrorInfo

ole32

RegisterDragDrop CoUninitialize RevokeDragDrop OleInitialize PropVariantClear CoInitializeEx CoCreateInstance

combase

CoTaskMemFree

user32

GetWindowRect AdjustWindowRectEx GetWindowLongW SetWindowLongW EnableMenuItem SystemParametersInfoA ShowWindow ShowCursor ClipCursor GetClipCursor CreateIcon SetWindowPlacement ValidateRect GetCursorPos MonitorFromRect ScreenToClient GetMenu CreateWindowExW RegisterClassExW MsgWaitForMultipleObjectsEx SetWindowDisplayAffinity SendMessageW IsProcessDPIAware DefWindowProcW CreateIconIndirect RegisterWindowMessageA DestroyIcon DestroyCursor SetForegroundWindow GetWindowPlacement DisplayConfigGetDeviceInfo QueryDisplayConfig GetDisplayConfigBufferSizes DefWindowProcA RegisterClassExA GetClassInfoExA PeekMessageW ChangeDisplaySettingsExW GetMonitorInfoW ReleaseDC GetDC CreateWindowExA GetWindowLongPtrW DestroyWindow GetSystemMetrics LoadCursorW SetCursor PostMessageW GetClientRect GetSystemMenu MessageBoxW TranslateMessage DispatchMessageW SetWindowLongPtrW SetWindowTextW SetCursorPos ClientToScreen RedrawWindow MonitorFromWindow InvalidateRgn SetWindowPos IsClipboardFormatAvailable CloseClipboard SetClipboardData OpenClipboard GetClipboardData RegisterClipboardFormatW RegisterRawInputDevices GetKeyState RegisterTouchWindow EmptyClipboard GetAsyncKeyState ReleaseCapture SetCapture TrackMouseEvent GetTouchInputInfo CloseTouchInputHandle GetRawInputData MapVirtualKeyW GetActiveWindow GetKeyboardState GetKeyboardLayout MapVirtualKeyExW SendInput ToUnicodeEx

ntdll

NtCreateNamedPipeFile NtOpenFile RtlNtStatusToDosError NtCancelIoFileEx NtWriteFile NtDeviceIoControlFile NtReadFile NtCreateFile

shlwapi

AssocQueryStringW

opengl32

wglMakeCurrent wglCreateContext wglDeleteContext wglGetProcAddress wglGetCurrentContext

setupapi

SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW

dxgi

CreateDXGIFactory1

shell32

DragFinish DragQueryFileW

ws2_32

connect closesocket shutdown setsockopt WSAGetLastError WSAIoctl WSASocketW getsockopt ioctlsocket recv send getaddrinfo WSAStartup WSACleanup bind freeaddrinfo

bcryptprimitives

ProcessPrng

imm32

ImmGetCompositionStringW ImmSetCandidateWindow ImmAssociateContextEx ImmGetContext ImmReleaseContext ImmSetCompositionWindow

crypt32

CryptUnprotectData CryptProtectData

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

uxtheme

SetWindowTheme

vcruntime140

memset __CxxFrameHandler3 __current_exception_context __current_exception __C_specific_handler memmove memcmp _CxxThrowException memcpy

api-ms-win-crt-math-l1-1-0

sinf powf floorf atan2 cosf cbrtf __setusermatherr atan2f _hypotf fmodf acos sinh sinhf asin ceilf asinf trunc exp2 roundf expf fmod sin log1pf log1p exp cos floor tanf atan atanf tanh tanhf truncf round logf cosh exp2f ceil acosf coshf fma log2f fmaf cbrt log pow _hypot tan log2

api-ms-win-crt-runtime-l1-1-0

exit _cexit strerror __p___argv _crt_atexit __p___argc _register_onexit_function _initialize_onexit_table _exit _register_thread_local_exe_atexit_callback _c_exit _initterm_e _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm terminate

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_7a6ef42c6f45abbb22923aa761668a1e_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

kernel32

advapi32

gdi32

api-ms-win-core-synch-l1-2-0

oleaut32

ole32

combase

user32

ntdll

shlwapi

opengl32

setupapi

dxgi

shell32

ws2_32

bcryptprimitives

imm32

crypt32

dwmapi

uxtheme

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic