a31fa9052b5c2e91bc5b370da0a2ac7035dab9c0419894931d1a8f571f9fcf57

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 01:24

Target
2026-11-12_671e609dfe4de48b60ffaf27c8781a05_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 20.0MB
Sample261113-bsp9wsac86
SHA256 a31fa9052b5c2e91bc5b370da0a2ac7035dab9c0419894931d1a8f571f9fcf57
MD5 671e609dfe4de48b60ffaf27c8781a05
SHA1 4b468a57a851b671fcd2f746558157af0a1f28f8
SHA512 00758372db74d658ee67cc50bf1befefd6a13c0b74344f2d5133803990bedbe9c8c79cb900e6dd0c1ead67b8200971f79ac9f49ff957f8ad505a40495a999509
SSDEEP 98304:SQv2jWPO42z6xuPhGFclFmyVgJDgy6bwuzOvMT8RXEHgi5GHQSbrOQPItIlHcfuH:Q6xahGC70wV/AzAXQd+2Tuq
TLSH
T19C275C12B69B6CDCD51AC4B0874B8B1349217C8707266BBB61C4A33A3F7BBD46E38715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4836	2026-11-12_671e609dfe4de48b60ffaf27c8781a05_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-12_671e609dfe4de48b60ffaf27c8781a05_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-12_671e609dfe4de48b60ffaf27c8781a05_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4836