General
- Target 2026-10-30_910460a6c8ddd2e9ef314e3d74d24ae7_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom
- Size 20.2MB
- Sample261030-14s8cssshz
- SHA256 a369178600db931ba584b63ed3a88c5e9dec4f2eed1f87ca4450f2b1c4951091
- MD5 910460a6c8ddd2e9ef314e3d74d24ae7
- SHA1 8663568aec59716595e558fc83b6b6245c4d443f
- SHA512 d5888e48008e342356297e4723dad7b304fc56da5e6d86f71fff0ccf023e19700f4cec24437d43654d6cc0d8528138102a70cb765faee4ad2654dc5a5dbb1034
- SSDEEP 98304:gfDG3PePLiEJsjsFQx6eWEhqloNtLOM1kILrDo5/caSwXwL99ylbf+ZNNVS0i+WZ:YfJsSo6eRx1kUS/caSwX8ZNNVSrF
- TLSH T17127F6217A5B99ACD19AC87083468A721E6130DB1B36B9FF44D452393F6DBF46F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-30_910460a6c8ddd2e9ef314e3d74d24ae7_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_910460a6c8ddd2e9ef314e3d74d24ae7_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-30_910460a6c8ddd2e9ef314e3d74d24ae7_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer_satacom
- Size 20.2MB
- SHA256 a369178600db931ba584b63ed3a88c5e9dec4f2eed1f87ca4450f2b1c4951091
- MD5 910460a6c8ddd2e9ef314e3d74d24ae7
- SHA1 8663568aec59716595e558fc83b6b6245c4d443f
- SHA512 d5888e48008e342356297e4723dad7b304fc56da5e6d86f71fff0ccf023e19700f4cec24437d43654d6cc0d8528138102a70cb765faee4ad2654dc5a5dbb1034
- SSDEEP 98304:gfDG3PePLiEJsjsFQx6eWEhqloNtLOM1kILrDo5/caSwXwL99ylbf+ZNNVS0i+WZ:YfJsSo6eRx1kUS/caSwX8ZNNVSrF
- TLSH T17127F6217A5B99ACD19AC87083468A721E6130DB1B36B9FF44D452393F6DBF46F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.