49a646221cd170326383fa3c565da4e31652eba40114451a28834e49e5a4aa6c | Triage

Sharing

General

Target

2025-05-08_09b8552d5057f3c78c646c3159846f6e_akira_cobalt-strike_rusty-stealer_satacom
Size

12.2MB
Sample

250508-g6lfrayxdt
MD5

09b8552d5057f3c78c646c3159846f6e
SHA1

7f27b99904deabc5f392748caa51efec0470d94c
SHA256

49a646221cd170326383fa3c565da4e31652eba40114451a28834e49e5a4aa6c
SHA512

9e75d563cf52ecd97394ba93c14a2246169ee5df77c7bb1bf6cc9c847354ea2d1e0c490ce6ce16045996816000aa7ce668ac162a0f60b7855629ad97765d7beb
SSDEEP

98304:XKfVOLEAvLmcpVoPtC9H72kKZVR8wVQBrEwcPuyGfL1w+xVkn/ru+X5/flzBYQ8:XKf8TmcpetCN2H8BY2JvUj8

Score

6^/10

defense_evasion discovery execution trojan

Malware Config

Targets

- Target
  
  2025-05-08_09b8552d5057f3c78c646c3159846f6e_akira_cobalt-strike_rusty-stealer_satacom
- Size
  
  12.2MB
- MD5
  
  09b8552d5057f3c78c646c3159846f6e
- SHA1
  
  7f27b99904deabc5f392748caa51efec0470d94c
- SHA256
  
  49a646221cd170326383fa3c565da4e31652eba40114451a28834e49e5a4aa6c
- SHA512
  
  9e75d563cf52ecd97394ba93c14a2246169ee5df77c7bb1bf6cc9c847354ea2d1e0c490ce6ce16045996816000aa7ce668ac162a0f60b7855629ad97765d7beb
- SSDEEP
  
  98304:XKfVOLEAvLmcpVoPtC9H72kKZVR8wVQBrEwcPuyGfL1w+xVkn/ru+X5/flzBYQ8:XKf8TmcpetCN2H8BY2JvUj8
Score

6^/10

defense_evasion discovery execution trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
- Command and Scripting Interpreter: PowerShell
  Run Powershell to get system information.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutiontrojan

behavioral2

defense_evasiondiscoveryexecutiontrojan

	
		OSZAR »