2026-06-27_aa5894c257992b7e633d0627fe8badcd_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-27_aa5894c257992b7e633d0627fe8badcd_akira_rusty-stealer
Size 328KB
Sample260629-eptppacx9s
SHA256 1ef57b1fbb896283edfb54db3c4b110db19791eef1bbd5e2a28f441889b6f42c
MD5 aa5894c257992b7e633d0627fe8badcd
SHA1 6c704e76fa8bfb9f70a17810a310efab2d9cddce
SHA512 c7c35c8f9f697a58f25a7b0f2178269dd7af1ec8d5b5975f72d4d061ff0a678f6f3cdac1c12346cb56cec8d6a13996639e03440fb5c4db3dad13a1406e0de0e7
SSDEEP 3072:1WYfxEwlX25UQKllpRFjNwlv8S3syUaQoWHy+aART6lnrAukQ9AUM28ryXTJ0UJZ:1W0AsJpalv8S3spar+4mTqEuJnCUl+2R
TLSH
T168644A17F69448F9D09DC074835A8673A672B88A0B35B6EF17D056213F26EE46F3C728
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-27_aa5894c257992b7e633d0627fe8badcd_akira_rusty-stealer

File Explorer

2026-06-27_aa5894c257992b7e633d0627fe8badcd_akira_rusty-stealer

.exe 328KB

2026-06-27_aa5894c257992b7e633d0627fe8badcd_akira_rusty-stealer

IMPHASH c7a8154229e318d5d220740b9ab782df
SHA256 1ef57b1fbb896283edfb54db3c4b110db19791eef1bbd5e2a28f441889b6f42c
MD5 aa5894c257992b7e633d0627fe8badcd
SHA1 6c704e76fa8bfb9f70a17810a310efab2d9cddce
SHA512 c7c35c8f9f697a58f25a7b0f2178269dd7af1ec8d5b5975f72d4d061ff0a678f6f3cdac1c12346cb56cec8d6a13996639e03440fb5c4db3dad13a1406e0de0e7
SSDEEP 3072:1WYfxEwlX25UQKllpRFjNwlv8S3syUaQoWHy+aART6lnrAukQ9AUM28ryXTJ0UJZ:1W0AsJpalv8S3spar+4mTqEuJnCUl+2R
TLSH
T168644A17F69448F9D09DC074835A8673A672B88A0B35B6EF17D056213F26EE46F3C728
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

253916

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

BdApiUtil_Killer.pdb

kernel32

WriteConsoleW CreateSemaphoreA GetConsoleOutputCP GetStdHandle ReleaseMutex CreateMutexA GetCurrentProcessId GetCurrentProcess WaitForSingleObjectEx GetCurrentThreadId ExitProcess SetConsoleCtrlHandler ReleaseSemaphore CreateThread CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject Sleep SetThreadStackGuarantee GetLastError SetLastError GetCurrentThread GetConsoleMode SetConsoleMode SetConsoleTextAttribute GetConsoleScreenBufferInfo IsProcessorFeaturePresent CloseHandle QueryPerformanceCounter FormatMessageW GetModuleHandleW GetEnvironmentVariableW HeapAlloc SetUnhandledExceptionFilter RtlVirtualUnwind WideCharToMultiByte lstrlenW GetProcAddress LoadLibraryA RtlLookupFunctionEntry GetModuleHandleA HeapReAlloc HeapFree GetProcessHeap AddVectoredExceptionHandler QueryPerformanceFrequency DeviceIoControl CreateFileW Process32Next Process32First CreateToolhelp32Snapshot GetCurrentDirectoryW GetModuleFileNameW GetCommandLineW GetFileType GetFileInformationByHandleEx GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter RtlCaptureContext MultiByteToWideChar

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ntdll

RtlNtStatusToDosError NtWriteFile

advapi32

ControlService CloseServiceHandle CreateServiceW StartServiceW OpenServiceW OpenSCManagerW DeleteService

vcruntime140

memmove memcpy memcmp __CxxFrameHandler3 __current_exception_context __current_exception memset __C_specific_handler

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv terminate _crt_atexit _register_onexit_function _initialize_onexit_table _set_app_type _initialize_narrow_environment _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _seh_filter_exe _exit exit _initterm_e _initterm _get_initial_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-27_aa5894c257992b7e633d0627fe8badcd_akira_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

advapi32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic