2026-05-28_74519032812f7a79922bec5666894beb_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-28_74519032812f7a79922bec5666894beb_akira_cobalt-strike_rusty-stealer_satacom
Size 1.5MB
Sample260528-cl577sdv7m
SHA256 60c3e226b88cf9e286cc8cc4cddd9b840ae29c8f86bb4b44040ed7166749dc48
MD5 74519032812f7a79922bec5666894beb
SHA1 105abc631daebe27620f839c4f5ef03cb718e4f7
SHA512 8276720d50c6940bd13dd618d0427c87cebb2532a1357131e8c92df1effd9bc62905cf357666a2b971e0a1a682708d9f4ae8903893e1be590702077b2a0bf48f
SSDEEP 24576:AUQGioGsv67/DnhpctAtnJFrx+gbmrfKOeDF83u5eQp/DqeS58OM+9Z:LLksv6TDh4AtnJF1jbmW5F6kei2l8+H
TLSH
T1F3651202F984ACF8E49AC07897054A536976F4850F22B1FF23E485B46F39AF55F3970A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-28_74519032812f7a79922bec5666894beb_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-05-28_74519032812f7a79922bec5666894beb_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.5MB

2026-05-28_74519032812f7a79922bec5666894beb_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH e915a42c823b734e198dee296b3e0512
SHA256 60c3e226b88cf9e286cc8cc4cddd9b840ae29c8f86bb4b44040ed7166749dc48
MD5 74519032812f7a79922bec5666894beb
SHA1 105abc631daebe27620f839c4f5ef03cb718e4f7
SHA512 8276720d50c6940bd13dd618d0427c87cebb2532a1357131e8c92df1effd9bc62905cf357666a2b971e0a1a682708d9f4ae8903893e1be590702077b2a0bf48f
SSDEEP 24576:AUQGioGsv67/DnhpctAtnJFrx+gbmrfKOeDF83u5eQp/DqeS58OM+9Z:LLksv6TDh4AtnJF1jbmW5F6kei2l8+H
TLSH
T1F3651202F984ACF8E49AC07897054A536976F4850F22B1FF23E485B46F39AF55F3970A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

152476

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

chromelevator.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

kernel32

ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetCurrentDirectoryW lstrlenW GetConsoleOutputCP GetProcAddress MultiByteToWideChar WriteConsoleW HeapAlloc FormatMessageW QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleA GetFullPathNameW CreateFileW SetFileTime SetFileInformationByHandle FindFirstFileExW FindClose GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW ExitProcess CreateWaitableTimerExW SetWaitableTimer Sleep LoadLibraryA WaitForSingleObjectEx RtlLookupFunctionEntry RtlCaptureContext GetEnvironmentVariableW GetCurrentProcess SetConsoleOutputCP GetConsoleScreenBufferInfo GetStdHandle HeapReAlloc HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler GetModuleHandleW GetComputerNameW GetTickCount64 GlobalMemoryStatusEx GetSystemInfo GetModuleFileNameW SetLastError GetCommandLineW ExpandEnvironmentStringsW GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter ReadFile PeekNamedPipe ConnectNamedPipe CreateNamedPipeW GetTickCount GetCurrentThreadId GetCurrentProcessId CloseHandle GetLastError SetFilePointerEx CreateProcessW WaitForSingleObject SetConsoleTextAttribute WriteFile CreateMutexA GetConsoleMode

bcrypt

BCryptSetProperty BCryptOpenAlgorithmProvider BCryptGenerateSymmetricKey BCryptCloseAlgorithmProvider BCryptDecrypt BCryptDestroyKey

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW GetUserNameW

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

vcruntime140

__C_specific_handler memcpy memcmp __CxxFrameHandler3 memmove __current_exception __current_exception_context memset

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_initterm_e _exit _get_initial_narrow_environment _initialize_narrow_environment _c_exit _initterm exit _set_app_type _cexit _seh_filter_exe _register_thread_local_exe_atexit_callback _initialize_onexit_table _register_onexit_function __p___argv _configure_narrow_argv _crt_atexit terminate __p___argc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-28_74519032812f7a79922bec5666894beb_akira_cobalt-strike_rusty-stealer_satacom

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

bcrypt

version

advapi32

ntdll

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic