General
- Target 2026-11-01_af8eb9ebaf29be1ccfd77041b28d46c6_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom
- Size 2.3MB
- Sample261102-ntdcyasyht
- SHA256 91aa9bfc68e15e8f60ea4e11fbfdebf91bd2c1f7ce65d1e34be8fbd30fd00af5
- MD5 af8eb9ebaf29be1ccfd77041b28d46c6
- SHA1 61e6e14c0a08306772dd22b41b56df323cfa3f8f
- SHA512 1053bc8c402d010589d4cf233a2e65d7e31f90b96463bc76c393b45b3835ce5f6d0d78173cb84bbbd5bcede72f5d0afae7fbc29a25873a4c8fb11e93291ad0a8
- SSDEEP 49152:c6nA8SHO1eDR42iXs3OUN7Kd3xaXIxYIU6ijyp:c6YP3v21n+jyp
- TLSH T11EB57D03F6A585EAC45AC478C3579632BA73B88D0731B5EF27D04A212E6BBD19F1C316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_af8eb9ebaf29be1ccfd77041b28d46c6_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_af8eb9ebaf29be1ccfd77041b28d46c6_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_af8eb9ebaf29be1ccfd77041b28d46c6_akira_cobalt-strike_glassworm_icedid_rusty-stealer_satacom
- Size 2.3MB
- SHA256 91aa9bfc68e15e8f60ea4e11fbfdebf91bd2c1f7ce65d1e34be8fbd30fd00af5
- MD5 af8eb9ebaf29be1ccfd77041b28d46c6
- SHA1 61e6e14c0a08306772dd22b41b56df323cfa3f8f
- SHA512 1053bc8c402d010589d4cf233a2e65d7e31f90b96463bc76c393b45b3835ce5f6d0d78173cb84bbbd5bcede72f5d0afae7fbc29a25873a4c8fb11e93291ad0a8
- SSDEEP 49152:c6nA8SHO1eDR42iXs3OUN7Kd3xaXIxYIU6ijyp:c6YP3v21n+jyp
- TLSH T11EB57D03F6A585EAC45AC478C3579632BA73B88D0731B5EF27D04A212E6BBD19F1C316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.