2026-06-03_019408ed715ec8f8e8cc0dbd0a30955c_akira_icedid_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-03_019408ed715ec8f8e8cc0dbd0a30955c_akira_icedid_rusty-stealer
Size 12.1MB
Sample260603-vcdqpsc13p
SHA256 37b2a9849c93760c2520c2a7174e81561370c95739df9c987413f6e0acd00b3b
MD5 019408ed715ec8f8e8cc0dbd0a30955c
SHA1 466aa5445c087718bba5fe65b4a204903c968437
SHA512 8bc50b331c1656efdf3462747c8a209581bb07d27e2f530748632971edbe6142fb9af763f67c1e7928fc5807ebdb6bfb02fd92e04bb43d658aaf8262d08f2acf
SSDEEP 24576:jHEAMYEB4BUDiykGrBtXpzt5Jcp6ZjPvBzWudeKqrBZfdvFh7sva:jkAMYEB42Vt5Z8uorBZ1thwi
TLSH
T107D6C00277FEB0AEEA6B97B4C56466459621FC7B0E51908E31CC109B0F979407EBC3B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-03_019408ed715ec8f8e8cc0dbd0a30955c_akira_icedid_rusty-stealer

File Explorer

2026-06-03_019408ed715ec8f8e8cc0dbd0a30955c_akira_icedid_rusty-stealer

.exe 12.1MB

2026-06-03_019408ed715ec8f8e8cc0dbd0a30955c_akira_icedid_rusty-stealer

IMPHASH b569e4f8efc1c4397bfacbeae85eda23
SHA256 37b2a9849c93760c2520c2a7174e81561370c95739df9c987413f6e0acd00b3b
MD5 019408ed715ec8f8e8cc0dbd0a30955c
SHA1 466aa5445c087718bba5fe65b4a204903c968437
SHA512 8bc50b331c1656efdf3462747c8a209581bb07d27e2f530748632971edbe6142fb9af763f67c1e7928fc5807ebdb6bfb02fd92e04bb43d658aaf8262d08f2acf
SSDEEP 24576:jHEAMYEB4BUDiykGrBtXpzt5Jcp6ZjPvBzWudeKqrBZfdvFh7sva:jkAMYEB42Vt5Z8uorBZ1thwi
TLSH
T107D6C00277FEB0AEEA6B97B4C56466459621FC7B0E51908E31CC109B0F979407EBC3B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

86944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

helper_430a8172.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

advapi32

GetTokenInformation OpenProcessToken

kernel32

SetFilePointerEx SetUnhandledExceptionFilter GetProcessHeap HeapFree HeapReAlloc CloseHandle GetCurrentProcessId GetCurrentThreadId GetLastError GetTickCount SetLastError GetComputerNameW GetSystemInfo GetModuleHandleA QueryPerformanceCounter GetOEMCP GetSystemTimePreciseAsFileTime SwitchToThread GetCurrentProcess WaitForSingleObject CreateFileW SetFileTime SetFileInformationByHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW ExitProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex GetFullPathNameW HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleMode GetConsoleOutputCP RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind FlushFileBuffers HeapSize LCMapStringW CompareStringW GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW WriteFile GetModuleFileNameW TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect

user32

GetDesktopWindow GetForegroundWindow GetSystemMetrics

ntdll

RtlNtStatusToDosError NtWriteFile

Name

.text

Size

141KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-03_019408ed715ec8f8e8cc0dbd0a30955c_akira_icedid_rusty-stealer

api-ms-win-core-synch-l1-2-0

advapi32

kernel32

user32

ntdll

generic