Analysis

  • max time kernel
    149s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/11/2026, 12:30

General

  • Target
    2026-11-01_a7a49dc3393aa757c31ae87764140051_akira_cobalt-strike_rusty-stealer_satacom.exe
  • Size 2.2MB
  • Sample261102-ppldeswt3m
  • SHA256 002bf8aa08963d5e1d0663dbcdada34a7ed1c98631b8b48196eac04e9c8df842
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-01_a7a49dc3393aa757c31ae87764140051_akira_cobalt-strike_rusty-stealer_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-01_a7a49dc3393aa757c31ae87764140051_akira_cobalt-strike_rusty-stealer_satacom.exe"
    1⤵
      PID:5540

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          symforge-test-linkops-5540-data.bin

          • Path C:\Users\Admin\AppData\Local\Temp\symforge-test-linkops-5540-data.bin
          • Size 10B
          • SHA256 84d89877f0d4041efb6bf91a16f0248f2fd573e6af05c19f96bedb9f882f7882
          • MD5 SHA1 SHA512

          symforge-test-remove-5540-data.bin

          • Path C:\Users\Admin\AppData\Local\Temp\symforge-test-remove-5540-data.bin
          • Size 13B
          • SHA256 808b59664b6adb9274e3bbd0766e7aec9659786c22fdb825c49ca7fda1c6236e
          • MD5 SHA1 SHA512

          a.txt

          • Path C:\Users\Admin\AppData\Local\Temp\symforge-test-remove-5540-real\a.txt
          • Size 3B
          • SHA256 9834876dcfb05cb167a5c24953eba58c4ac89b1adf57f28f2f9d09af107ee8f0
          • MD5 SHA1 SHA512

          b.txt

          • Path C:\Users\Admin\AppData\Local\Temp\symforge-test-remove-5540-real\b.txt
          • Size 3B
          • SHA256 3e744b9dc39389baf0c5a0660589b8402f3dbb49b89b3e75f2c9355852a3c677
          • MD5 SHA1 SHA512

          c.txt

          • Path C:\Users\Admin\AppData\Local\Temp\symforge-test-remove-5540-real\sub\c.txt
          • Size 3B
          • SHA256 64daa44ad493ff28a96effab6e77f1732a3d97d83241581b37dbd70a7a4900fe
          • MD5 SHA1 SHA512

          symforge-test-verify-5540-data.bin

          • Path C:\Users\Admin\AppData\Local\Temp\symforge-test-verify-5540-data.bin
          • Size 10B
          • SHA256 7ad5509fac1a1be4a59ae87959468840d2808bab1b3cd5676733194aa82ef338
          • MD5 SHA1 SHA512