eb53c298e144ddc7e04e351f2a502faed10746289228a23be4252531398a05fa

Analysis

max time kernel
150s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 02:58

Target
2026-10-28_67555960dadb3b5a890ff49fa1127d4c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 17.4MB
Sample261030-dgafeagy4s
SHA256 eb53c298e144ddc7e04e351f2a502faed10746289228a23be4252531398a05fa
MD5 67555960dadb3b5a890ff49fa1127d4c
SHA1 299864286693af6715ae3838593cd862a940da5a
SHA512 3fb4052bc89ec4b024eb1393e903f8293c9d868159a9f48da17bb1868e23aab4db2b9973b14695c63979aaf5cef7464ba12855aea82aa9a9f85979b19d1fa170
SSDEEP 196608:ry33tjED6xgTYAIcbzzv7sdIjAYRt2ysfRc29UUcYyA2T3H0F:GYWWY/wEdcP2rMUcY72DH
TLSH
T1A207D043F292D2FCC015C074D24662B3FAA6BC490B3575EBABC44A217E71EE0DA39756
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2180	2026-10-28_67555960dadb3b5a890ff49fa1127d4c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-28_67555960dadb3b5a890ff49fa1127d4c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-28_67555960dadb3b5a890ff49fa1127d4c_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:2180