2026-05-05_3557fb06a82898473aa2fa6cfad9a197_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-05_3557fb06a82898473aa2fa6cfad9a197_akira_cobalt-strike_rusty-stealer_satacom
Size 160KB
Sample260505-2nln1sf14v
SHA256 b7b791f654ffa0cf663f68480f964ecd84e95756550237f81367dd9d4a722025
MD5 3557fb06a82898473aa2fa6cfad9a197
SHA1 59f777e58864c6bfbc325d05919bf9c390ac4249
SHA512 d3d577f31b1c8bbee739c18bb085a7ea4befc5e85f51cf1ff08dd364e9a4c3ec41f8ee9800ee6b2e16822fd0ee0dc15ca0a02eb766d874585cb5ffe375afa57c
SSDEEP 3072:gs9eZtgUzjnhZPn+DK8qSwb6YyIXRLTWAWals/XCo:5enhpmKA49Rv2XT
TLSH
T164F35B27B65190F8D18AC074C3555673BB72B8C50B2276EF1A94A2342F29EE57F3CB24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-05_3557fb06a82898473aa2fa6cfad9a197_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-05-05_3557fb06a82898473aa2fa6cfad9a197_akira_cobalt-strike_rusty-stealer_satacom

.exe 160KB

2026-05-05_3557fb06a82898473aa2fa6cfad9a197_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH afb580766199d7aa5d14ccf844d138ec
SHA256 b7b791f654ffa0cf663f68480f964ecd84e95756550237f81367dd9d4a722025
MD5 3557fb06a82898473aa2fa6cfad9a197
SHA1 59f777e58864c6bfbc325d05919bf9c390ac4249
SHA512 d3d577f31b1c8bbee739c18bb085a7ea4befc5e85f51cf1ff08dd364e9a4c3ec41f8ee9800ee6b2e16822fd0ee0dc15ca0a02eb766d874585cb5ffe375afa57c
SSDEEP 3072:gs9eZtgUzjnhZPn+DK8qSwb6YyIXRLTWAWals/XCo:5enhpmKA49Rv2XT
TLSH
T164F35B27B65190F8D18AC074C3555673BB72B8C50B2276EF1A94A2342F29EE57F3CB24
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

112092

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

competing_paradise.pdb

kernel32

GetStdHandle WriteConsoleW GetConsoleMode SetConsoleCursorPosition SetLastError GetConsoleScreenBufferInfo SetConsoleMode GetConsoleOutputCP GetProcAddress GetModuleHandleA CloseHandle Sleep GetLastError IsProcessorFeaturePresent InitializeSListHead GetSystemTimeAsFileTime FormatMessageW GetModuleHandleW HeapAlloc GetEnvironmentVariableW WideCharToMultiByte RtlVirtualUnwind ReleaseMutex CreateMutexA SetUnhandledExceptionFilter GetCurrentProcessId lstrlenW UnhandledExceptionFilter GetCurrentProcess LoadLibraryA WaitForSingleObjectEx RtlLookupFunctionEntry GetProcessHeap HeapFree GetSystemTimePreciseAsFileTime HeapReAlloc AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread CreateFileW QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObject MultiByteToWideChar GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext IsDebuggerPresent

ntdll

RtlNtStatusToDosError NtWriteFile

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

vcruntime140

memcpy memcmp memset memmove __current_exception_context __current_exception __C_specific_handler __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type terminate _register_onexit_function _crt_atexit _initialize_onexit_table _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc _initialize_narrow_environment _cexit _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv __p___argv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-05_3557fb06a82898473aa2fa6cfad9a197_akira_cobalt-strike_rusty-stealer_satacom

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic