2026-05-22_0b9cd14cea21d6704ef09bc87b180f8c_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-22_0b9cd14cea21d6704ef09bc87b180f8c_akira_cobalt-strike_rusty-stealer_satacom
Size 23.8MB
Sample260522-cdzepact2r
SHA256 9c7a11c9d271405f4c78d742a550aac4bea33d3ab5cd4ec5b80daa2ad95988a6
MD5 0b9cd14cea21d6704ef09bc87b180f8c
SHA1 6057f66154433cbb7c50a2f80a9bda67404c3d6a
SHA512 56e5b4841fac95d219ef62dd361885ca7b04c25a1c52d43277b92352e5a21ae40a3e2eef6d996b05659161f4460703d53eef4c2c1752ca3534a25db19c4625ae
SSDEEP 393216:n/qIxyh6WFl7a4padhrKsADFAeuNml3yuOjaqVepdoXwBdkKIvtx:niISFl7aEaTlAJkk5TqgawbGP
TLSH
T18D473358A40F0CE4C67D82714A5841BDF65AB0BA1B1CBFFB48600C65BFCADE63798539
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-22_0b9cd14cea21d6704ef09bc87b180f8c_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-05-22_0b9cd14cea21d6704ef09bc87b180f8c_akira_cobalt-strike_rusty-stealer_satacom

.exe 23.8MB

2026-05-22_0b9cd14cea21d6704ef09bc87b180f8c_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 8ed8bdff5146a121f3d5576cbc2e641c
SHA256 9c7a11c9d271405f4c78d742a550aac4bea33d3ab5cd4ec5b80daa2ad95988a6
MD5 0b9cd14cea21d6704ef09bc87b180f8c
SHA1 6057f66154433cbb7c50a2f80a9bda67404c3d6a
SHA512 56e5b4841fac95d219ef62dd361885ca7b04c25a1c52d43277b92352e5a21ae40a3e2eef6d996b05659161f4460703d53eef4c2c1752ca3534a25db19c4625ae
SSDEEP 393216:n/qIxyh6WFl7a4padhrKsADFAeuNml3yuOjaqVepdoXwBdkKIvtx:niISFl7aEaTlAJkk5TqgawbGP
TLSH
T18D473358A40F0CE4C67D82714A5841BDF65AB0BA1B1CBFFB48600C65BFCADE63798539
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

80640

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

stub.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind WaitForSingleObject HeapReAlloc GetStdHandle HeapFree GetProcessHeap AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW ExitProcess WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW GetCurrentThreadId SetLastError GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetLastError GetProcAddress GetModuleHandleA QueryPerformanceCounter QueryPerformanceFrequency GetCurrentProcessId CloseHandle InitializeSListHead

ntdll

RtlNtStatusToDosError NtWriteFile

vcruntime140

__C_specific_handler __CxxFrameHandler3 memmove __current_exception_context __current_exception memcpy _CxxThrowException memcmp memset

api-ms-win-crt-runtime-l1-1-0

_set_app_type _initialize_narrow_environment _get_initial_narrow_environment _seh_filter_exe _configure_narrow_argv exit _exit _register_thread_local_exe_atexit_callback __p___argc __p___argv _initterm_e _initialize_onexit_table _register_onexit_function _initterm terminate _cexit _crt_atexit _c_exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-22_0b9cd14cea21d6704ef09bc87b180f8c_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic