2026-05-22_6b7bdb95e7e3b870aad2cf7eefbfbfb9_akira_icedid_rusty-stealer

General

Target
2026-05-22_6b7bdb95e7e3b870aad2cf7eefbfbfb9_akira_icedid_rusty-stealer
Size 1.6MB
Sample260522-dn4mtsf18x
SHA256 b2a4696180e0af91a4e67fd3fedeef0af76f9280a21dfd2dd4fb937b009ce149
MD5 6b7bdb95e7e3b870aad2cf7eefbfbfb9
SHA1 7b30689aa1636cf25f37a95e3961e4b13024d117
SHA512 ae60e46cf4ece16f9035b893829da44cfaf8c38628606f7302de26071bac8d791ab33735d84c14fa21d32ec9721abd77f4679e2f3ddf4c9eebe0a88efabf94a1
SSDEEP 6144:r4acZBGfxqqax9PVvJI7Me6KhpcFWwhtfmMkislI1iCiMmU5gfzDVlVXgA:LcZBoUHI7XpcvteMkTU5GpXL
TLSH
T17E75BC6B374013B2C0218776074E31AEEB5AD1BC2632DBF6444679213B74EB906797EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-22_6b7bdb95e7e3b870aad2cf7eefbfbfb9_akira_icedid_rusty-stealer

File Explorer

2026-05-22_6b7bdb95e7e3b870aad2cf7eefbfbfb9_akira_icedid_rusty-stealer

.exe 1.6MB

2026-05-22_6b7bdb95e7e3b870aad2cf7eefbfbfb9_akira_icedid_rusty-stealer

IMPHASH 4f31adc50afb35b28749a2c35fc1e324
SHA256 b2a4696180e0af91a4e67fd3fedeef0af76f9280a21dfd2dd4fb937b009ce149
MD5 6b7bdb95e7e3b870aad2cf7eefbfbfb9
SHA1 7b30689aa1636cf25f37a95e3961e4b13024d117
SHA512 ae60e46cf4ece16f9035b893829da44cfaf8c38628606f7302de26071bac8d791ab33735d84c14fa21d32ec9721abd77f4679e2f3ddf4c9eebe0a88efabf94a1
SSDEEP 6144:r4acZBGfxqqax9PVvJI7Me6KhpcFWwhtfmMkislI1iCiMmU5gfzDVlVXgA:LcZBoUHI7XpcvteMkTU5GpXL
TLSH
T17E75BC6B374013B2C0218776074E31AEEB5AD1BC2632DBF6444679213B74EB906797EE
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

246256

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

ntdll

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlUnwindEx NtWriteFile RtlNtStatusToDosError RtlPcToFileHeader

kernel32

GetStringTypeW HeapSize LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetProcessHeap HeapFree HeapReAlloc CloseHandle lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx GetLastError SetFileInformationByHandle FlushFileBuffers SetFileTime WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetCommandLineW GetFileInformationByHandleEx CreateFileW GetFileInformationByHandle FindFirstFileExW FindClose GetConsoleMode GetFileType GetModuleHandleW SetEnvironmentVariableW GetFullPathNameW GetModuleHandleA GetModuleFileNameW ExitProcess HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep SetStdHandle FreeEnvironmentStringsW GetSystemTimePreciseAsFileTime QueryPerformanceCounter GetCurrentThreadId TerminateProcess FindNextFileW GetCPInfo GetOEMCP GetACP IsValidCodePage GetCommandLineA GetModuleHandleExW WriteFile LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException EncodePointer IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-22_6b7bdb95e7e3b870aad2cf7eefbfbfb9_akira_icedid_rusty-stealer

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

kernel32

generic