8791684080bca08f8f4fa7cee9f99f98de369d7907e00555a109d8041858e2e8

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 19:58

Target
2026-10-27_fc1427280ed4403b96d64038e8f6a044_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 17.4MB
Sample261027-yp968afw8x
SHA256 8791684080bca08f8f4fa7cee9f99f98de369d7907e00555a109d8041858e2e8
MD5 fc1427280ed4403b96d64038e8f6a044
SHA1 3543e58eeec7457e8db420cd8fa1c884e6518f62
SHA512 38f51ee9ee54cfdf3f216b3de54968f7b3f51261ccb3386c6067dae6a2f7c72ae35136d03eb5ddb80e75a22ec83e1ab5e40e674d31158de8e0a4a806d338d6bc
SSDEEP 196608:ry33tjED6xgTY8Icbzzv7sdIjAYRt2ysfRc29UUcYyA2T3H0F:GYWWYLwEdcP2rMUcY72DH
TLSH
T14F07D043F292D2FCC015C074D24662B3FAA6BC490B3575EBABC44A217E71EE0DA39756
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2820	2026-10-27_fc1427280ed4403b96d64038e8f6a044_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-27_fc1427280ed4403b96d64038e8f6a044_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-27_fc1427280ed4403b96d64038e8f6a044_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:2820