2026-10-25_8e72ae4777b9d9ce2c45e2aa50e88754_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_8e72ae4777b9d9ce2c45e2aa50e88754_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom
Size 20.2MB
Sample261026-y6bd8ahs2n
SHA256 521df7963e4f260a3a37e426ba90547585b2095bc795a5d812700a648602457c
MD5 8e72ae4777b9d9ce2c45e2aa50e88754
SHA1 abfc3d22f975b7679c2b1b3bdf8a3cd12812c0da
SHA512 33db1e00fa9a0be536baba173b6e8fb45d9cb2469fe644621a8321f049f4b9c778e6484ac97c7b4d3d45b849a4ff97862f4d1c4b28c8e5c546adad0d620f772d
SSDEEP 98304:e0z0oY2MXEgV02kI/R9vEA4ebqoa928CeOLtZIO1BCYPpI1VFrEIkBuxUvS/Wo51:w0ZsrCIpusIBTynqKMZJ+9
TLSH
T1E0276C42B65B98ACE06AC8B0C3069A779E2174DB0736B9FF41C455383F6DBE05B38719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_8e72ae4777b9d9ce2c45e2aa50e88754_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

File Explorer

2026-10-25_8e72ae4777b9d9ce2c45e2aa50e88754_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

.exe 20.2MB

2026-10-25_8e72ae4777b9d9ce2c45e2aa50e88754_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

IMPHASH 5d2fbe81ddd978c5a1d84a75af06f6fa
SHA256 521df7963e4f260a3a37e426ba90547585b2095bc795a5d812700a648602457c
MD5 8e72ae4777b9d9ce2c45e2aa50e88754
SHA1 abfc3d22f975b7679c2b1b3bdf8a3cd12812c0da
SHA512 33db1e00fa9a0be536baba173b6e8fb45d9cb2469fe644621a8321f049f4b9c778e6484ac97c7b4d3d45b849a4ff97862f4d1c4b28c8e5c546adad0d620f772d
SSDEEP 98304:e0z0oY2MXEgV02kI/R9vEA4ebqoa928CeOLtZIO1BCYPpI1VFrEIkBuxUvS/Wo51:w0ZsrCIpusIBTynqKMZJ+9
TLSH
T1E0276C42B65B98ACE06AC8B0C3069A779E2174DB0736B9FF41C455383F6DBE05B38719
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14789904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

to_engine.pdb

kernel32

CreateFileW SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx FindFirstFileExW FindClose GetFinalPathNameByHandleW GetFileAttributesW WriteFileEx ReadFileEx GetQueuedCompletionStatusEx SetThreadStackGuarantee FindNextFileW AddVectoredExceptionHandler CreateProcessW CreateIoCompletionPort SetFileCompletionNotificationModes RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SetHandleInformation GetFullPathNameW QueryPerformanceCounter QueryPerformanceFrequency SetLastError SleepEx CreateThread GetModuleHandleA Sleep HeapAlloc DuplicateHandle GetCurrentProcess FormatMessageW HeapFree GetModuleHandleW GetProcessHeap LocalFree GetCurrentThreadId PostQueuedCompletionStatus WaitForSingleObject SetEvent WaitForMultipleObjectsEx SetThreadPriority CreateEventA RemoveVectoredExceptionHandler LoadLibraryExA CloseHandle SetWaitableTimer SwitchToThread CreateWaitableTimerExW ReleaseMutex InitializeSListHead SetUnhandledExceptionFilter CreateMutexA GlobalFree ExitProcess GetCurrentProcessId LoadLibraryA GetCurrentThread GetModuleFileNameW FreeLibrary GetProcAddress LoadLibraryExW SetThreadErrorMode WaitForSingleObjectEx GetLastError GetSystemTimeAsFileTime GlobalLock GlobalAlloc GlobalUnlock MultiByteToWideChar GlobalSize WideCharToMultiByte GetSystemInfo UnmapViewOfFile VirtualProtect CreateFileMappingW MapViewOfFile CompareStringOrdinal GetSystemTimePreciseAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW GetStdHandle GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW SystemTimeToTzSpecificLocalTime GetConsoleOutputCP GetConsoleMode WriteConsoleW lstrlenW HeapReAlloc

advapi32

ImpersonateAnonymousToken RevertToSelf

gdi32

SwapBuffers DescribePixelFormat GetPixelFormat CreateCompatibleBitmap SetBitmapBits CreateBitmap CreateRectRgn DeleteObject GetDeviceCaps ChoosePixelFormat SetPixelFormat

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

oleaut32

SysStringLen GetErrorInfo SysFreeString SetErrorInfo

ole32

RegisterDragDrop CoUninitialize RevokeDragDrop OleInitialize PropVariantClear CoInitializeEx CoCreateInstance

combase

CoTaskMemFree

user32

GetWindowRect AdjustWindowRectEx GetWindowLongW SetWindowLongW EnableMenuItem SystemParametersInfoA ShowWindow ShowCursor ClipCursor GetClipCursor CreateIcon SetWindowPlacement ValidateRect GetCursorPos MonitorFromRect ScreenToClient GetMenu CreateWindowExW RegisterClassExW MsgWaitForMultipleObjectsEx SetWindowDisplayAffinity SendMessageW IsProcessDPIAware DefWindowProcW CreateIconIndirect RegisterWindowMessageA DestroyIcon DestroyCursor SetForegroundWindow GetWindowPlacement DisplayConfigGetDeviceInfo QueryDisplayConfig GetDisplayConfigBufferSizes DefWindowProcA RegisterClassExA GetClassInfoExA PeekMessageW ChangeDisplaySettingsExW GetMonitorInfoW ReleaseDC GetDC CreateWindowExA GetWindowLongPtrW DestroyWindow GetSystemMetrics LoadCursorW SetCursor PostMessageW GetClientRect GetSystemMenu MessageBoxW TranslateMessage DispatchMessageW SetWindowLongPtrW SetWindowTextW SetCursorPos ClientToScreen RedrawWindow MonitorFromWindow InvalidateRgn SetWindowPos IsClipboardFormatAvailable CloseClipboard SetClipboardData OpenClipboard GetClipboardData RegisterClipboardFormatW RegisterRawInputDevices GetKeyState RegisterTouchWindow EmptyClipboard GetAsyncKeyState ReleaseCapture SetCapture TrackMouseEvent GetTouchInputInfo CloseTouchInputHandle GetRawInputData MapVirtualKeyW GetActiveWindow GetKeyboardState GetKeyboardLayout MapVirtualKeyExW SendInput ToUnicodeEx

ntdll

NtCreateNamedPipeFile NtOpenFile RtlNtStatusToDosError NtCancelIoFileEx NtWriteFile NtDeviceIoControlFile NtReadFile NtCreateFile

shlwapi

AssocQueryStringW

opengl32

wglMakeCurrent wglCreateContext wglDeleteContext wglGetProcAddress wglGetCurrentContext

setupapi

SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW

dxgi

CreateDXGIFactory1

shell32

DragFinish DragQueryFileW

ws2_32

connect closesocket shutdown setsockopt WSAGetLastError WSAIoctl WSASocketW getsockopt ioctlsocket recv send getaddrinfo WSAStartup WSACleanup bind freeaddrinfo

bcryptprimitives

ProcessPrng

imm32

ImmGetCompositionStringW ImmSetCandidateWindow ImmAssociateContextEx ImmGetContext ImmReleaseContext ImmSetCompositionWindow

crypt32

CryptUnprotectData CryptProtectData

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

uxtheme

SetWindowTheme

vcruntime140

memset __CxxFrameHandler3 __current_exception_context __current_exception __C_specific_handler memmove memcmp _CxxThrowException memcpy

api-ms-win-crt-math-l1-1-0

sinf powf floorf atan2 cosf cbrtf __setusermatherr atan2f _hypotf fmodf acos sinh sinhf asin ceilf asinf trunc exp2 roundf expf fmod sin log1pf log1p exp cos floor tanf atan atanf tanh tanhf truncf round logf cosh exp2f ceil acosf coshf fma log2f fmaf cbrt log pow _hypot tan log2

api-ms-win-crt-runtime-l1-1-0

exit _cexit strerror __p___argv _crt_atexit __p___argc _register_onexit_function _initialize_onexit_table _exit _register_thread_local_exe_atexit_callback _c_exit _initterm_e _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm terminate

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_8e72ae4777b9d9ce2c45e2aa50e88754_akira_cobalt-strike_glassworm_poet-rat_rusty-stealer_satacom

kernel32

advapi32

gdi32

api-ms-win-core-synch-l1-2-0

oleaut32

ole32

combase

user32

ntdll

shlwapi

opengl32

setupapi

dxgi

shell32

ws2_32

bcryptprimitives

imm32

crypt32

dwmapi

uxtheme

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic