ba80fc37c100a69639b4a9d86735699707c35ced363648aff4f747c6fcaf78d1

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 16:33

Target
2026-10-30_ceca0128d5adc3e6fd9b343fbc3a34b9_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 17.4MB
Sample261030-t2l8psex2q
SHA256 ba80fc37c100a69639b4a9d86735699707c35ced363648aff4f747c6fcaf78d1
MD5 ceca0128d5adc3e6fd9b343fbc3a34b9
SHA1 18a3aaa465df10068c02148f87c3c9c1d2a328c6
SHA512 f47e07ae81d0050d84b254a19988185e09019677930bec06315253c8737c3104259a3f7f825ff3e6652b1f48fca2da2ee70698ca3ab6a8e3e7b91efafd40f23e
SSDEEP 196608:ry33tjED6xgTY7Icbzzv7sdIjAYRt2ysfRc29UUcYyA2T3H0F:GYWWYswEdcP2rMUcY72DH
TLSH
T18F07D043F292D2FCC015C074D24662B3FAA6BC490B3575EBABC44A217E71EE0DA39756
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3644	2026-10-30_ceca0128d5adc3e6fd9b343fbc3a34b9_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-30_ceca0128d5adc3e6fd9b343fbc3a34b9_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-30_ceca0128d5adc3e6fd9b343fbc3a34b9_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:3644