2026-05-29_fa1f135eb047b0b238ba1372a649bdf2_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-29_fa1f135eb047b0b238ba1372a649bdf2_akira_cobalt-strike_rusty-stealer_satacom
Size 395KB
Sample260529-3vb9labx4s
SHA256 8d7fa6afc60a9ca226bb76b018f80fb937620ff5f83662ab418864a265f26662
MD5 fa1f135eb047b0b238ba1372a649bdf2
SHA1 9ab862ca4342006d8317381c2648217756328d53
SHA512 931b233200f08a88acf0f0e111f477e9331b799852e68a5f1867f30dde3a6ddbc751ad821d77f7d6ff3e8e121b0a6ba3759afcca0fb3bd1b117de00acee0595d
SSDEEP 6144:qH4f8NvO5vMORPFl72QOnya1Ak05HZ7gtqnkr5Tha2F3vbo1MW+M5K4z8vFYBGw:rUG5vfjzaW05VJU13/AFnw
TLSH
T1CC846C22FA4558ACD05AC47483468673AA7270CE1B31BDFF52D891343FA9AF52F38758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-29_fa1f135eb047b0b238ba1372a649bdf2_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-05-29_fa1f135eb047b0b238ba1372a649bdf2_akira_cobalt-strike_rusty-stealer_satacom

.exe 395KB

2026-05-29_fa1f135eb047b0b238ba1372a649bdf2_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 393284622e80bef377894329147c1f13
SHA256 8d7fa6afc60a9ca226bb76b018f80fb937620ff5f83662ab418864a265f26662
MD5 fa1f135eb047b0b238ba1372a649bdf2
SHA1 9ab862ca4342006d8317381c2648217756328d53
SHA512 931b233200f08a88acf0f0e111f477e9331b799852e68a5f1867f30dde3a6ddbc751ad821d77f7d6ff3e8e121b0a6ba3759afcca0fb3bd1b117de00acee0595d
SSDEEP 6144:qH4f8NvO5vMORPFl72QOnya1Ak05HZ7gtqnkr5Tha2F3vbo1MW+M5K4z8vFYBGw:rUG5vfjzaW05VJU13/AFnw
TLSH
T1CC846C22FA4558ACD05AC47483468673AA7270CE1B31BDFF52D891343FA9AF52F38758
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

242224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

stub.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

CreateWaitableTimerExW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime CloseHandle LoadLibraryA GetProcAddress GetModuleHandleA VirtualProtect VirtualAlloc VirtualFree GetThreadContext SetThreadContext CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateThread WaitForSingleObject CreateProcessW TerminateProcess OpenProcess CompareStringOrdinal GetLastError FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter GetCurrentProcessId ReadFileEx GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW GetExitCodeProcess GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex DeleteFileW HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP SetWaitableTimer Sleep GetFileAttributesW GetModuleHandleW FormatMessageW GetModuleFileNameW GetTempPathW

ntdll

NtWriteFile NtOpenFile NtCreateNamedPipeFile RtlNtStatusToDosError

vcruntime140

__CxxFrameHandler3 memset __current_exception __C_specific_handler memcpy __current_exception_context memcmp _CxxThrowException memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit terminate _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-29_fa1f135eb047b0b238ba1372a649bdf2_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic