General
- Target 2026-10-25_7025b7d9251570fdd3e0f10e66f0edde_akira_cobalt-strike_glassworm_satacom
- Size 4.6MB
- Sample261027-apd7saat5n
- SHA256 2e9d5253ca0d4927d9141e7b9157c6d19d8adf1865d7cb43504c2991c3d1e163
- MD5 7025b7d9251570fdd3e0f10e66f0edde
- SHA1 26f46d553440108bee43fb72259e6f06b9957803
- SHA512 804be4edb6e32decf354c7dd74b0972c3e7b3be20ed474d3f3c6cbcfe15c8f4ca81e5db35fb0c377bc067378e9d8aff1bdf03fd50e84093b89a9a83c1f3d6f05
- SSDEEP 49152:xuuIcmSwlKxviq33uXM+mDiHDqrKgMXRIxp9ZX51q9SASScpfB5X:xyfmF8oQRiF5s9SVN55
- TLSH T190265C157B4A58FAC05AC170C24B4B729A3174DE2B36BAFF4084A6743E75AF41F3D298
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_7025b7d9251570fdd3e0f10e66f0edde_akira_cobalt-strike_glassworm_satacom.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_7025b7d9251570fdd3e0f10e66f0edde_akira_cobalt-strike_glassworm_satacom
- Size 4.6MB
- SHA256 2e9d5253ca0d4927d9141e7b9157c6d19d8adf1865d7cb43504c2991c3d1e163
- MD5 7025b7d9251570fdd3e0f10e66f0edde
- SHA1 26f46d553440108bee43fb72259e6f06b9957803
- SHA512 804be4edb6e32decf354c7dd74b0972c3e7b3be20ed474d3f3c6cbcfe15c8f4ca81e5db35fb0c377bc067378e9d8aff1bdf03fd50e84093b89a9a83c1f3d6f05
- SSDEEP 49152:xuuIcmSwlKxviq33uXM+mDiHDqrKgMXRIxp9ZX51q9SASScpfB5X:xyfmF8oQRiF5s9SVN55
- TLSH T190265C157B4A58FAC05AC170C24B4B729A3174DE2B36BAFF4084A6743E75AF41F3D298
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1