2026-06-26_377eebd6dc4dfd1402f30fb8db4c4ef5_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-26_377eebd6dc4dfd1402f30fb8db4c4ef5_akira_cobalt-strike_rusty-stealer_satacom
Size 12.5MB
Sample260629-ve263sh191
SHA256 734f588b76c5300ed8b74e43cd13428b4753782e1bf0d77fc5980727a82df2b9
MD5 377eebd6dc4dfd1402f30fb8db4c4ef5
SHA1 653c70e156f8f8268fa6938fd08b9bc2d7ff443d
SHA512 957662fab06d1c4f50a37e6f4428dc7ffa62f93dfb9c181f5ffea230b5fcb0d520d803d051ef779c15493ba48c6764d4d9a0db9e34d44e985036c81a87c245a2
SSDEEP 98304:mQ6SMTCF3XuLQyNfZfONbop72deZNESVU:mQ5JMQyNfZtxU
TLSH
T1B9D6FA17A77960D9C17FC07892839F22BD21749947396BF38AD1826A1F20EF8AD7D314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-26_377eebd6dc4dfd1402f30fb8db4c4ef5_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-06-26_377eebd6dc4dfd1402f30fb8db4c4ef5_akira_cobalt-strike_rusty-stealer_satacom

.exe 12.5MB

2026-06-26_377eebd6dc4dfd1402f30fb8db4c4ef5_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 84a48b91f995303f77477eb5a546aab0
SHA256 734f588b76c5300ed8b74e43cd13428b4753782e1bf0d77fc5980727a82df2b9
MD5 377eebd6dc4dfd1402f30fb8db4c4ef5
SHA1 653c70e156f8f8268fa6938fd08b9bc2d7ff443d
SHA512 957662fab06d1c4f50a37e6f4428dc7ffa62f93dfb9c181f5ffea230b5fcb0d520d803d051ef779c15493ba48c6764d4d9a0db9e34d44e985036c81a87c245a2
SSDEEP 98304:mQ6SMTCF3XuLQyNfZfONbop72deZNESVU:mQ5JMQyNfZtxU
TLSH
T1B9D6FA17A77960D9C17FC07892839F22BD21749947396BF38AD1826A1F20EF8AD7D314
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8670640

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

app.pdb

kernel32

HeapAlloc CreateFileW SetLastError GetConsoleMode FreeLibrary GetModuleFileNameW HeapFree CloseHandle GetProcessHeap LoadLibraryExA FormatMessageW GetLastError SetThreadErrorMode GetProcAddress LoadLibraryExW Sleep GetModuleHandleA GlobalFree LoadLibraryW InitializeSListHead SetUnhandledExceptionFilter GetSystemTimeAsFileTime ExitProcess FindClose FindFirstFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW SetThreadStackGuarantee AddVectoredExceptionHandler CreateDirectoryW GetStdHandle GetExitCodeProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetEnvironmentStringsW GetFileInformationByHandleEx GetFileInformationByHandle GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess ReadFileEx GetCurrentProcessId CreateThread QueryPerformanceCounter QueryPerformanceFrequency HeapReAlloc SetFileTime SetFileInformationByHandle GetFullPathNameW SleepEx WriteFileEx FreeEnvironmentStringsW WaitForSingleObject CompareStringOrdinal LoadLibraryA CreateWaitableTimerExW SetWaitableTimer GetCurrentThread MultiByteToWideChar WideCharToMultiByte GlobalSize GlobalUnlock GlobalAlloc GlobalLock GetCurrentThreadId SwitchToThread WaitForSingleObjectEx CreateMutexA ReleaseMutex GetModuleHandleW GetFileAttributesW GetConsoleOutputCP WriteConsoleW GetSystemInfo

user32

DispatchMessageW PostMessageW ReleaseDC GetActiveWindow GetSystemMetrics SendMessageW CreateIconFromResourceEx IsWindowVisible TranslateMessage GetClientRect GetWindowPlacement GetClassNameW GetClassInfoExW DefWindowProcW RegisterClassExW CreateWindowExW GetDC GetForegroundWindow ClientToScreen SetWindowPos InvalidateRgn SetCursorPos FlashWindowEx PeekMessageW DestroyWindow RemovePropW CallWindowProcW SetWindowLongPtrW GetPropW SetPropW RedrawWindow IsClipboardFormatAvailable GetClipboardData RegisterClipboardFormatW CloseClipboard RegisterWindowMessageA SetCapture ReleaseCapture GetWindowLongPtrW MsgWaitForMultipleObjectsEx MonitorFromRect TrackMouseEvent GetMenu GetTouchInputInfo CloseTouchInputHandle ScreenToClient LoadCursorW SetCursor MonitorFromWindow GetCursorPos GetMonitorInfoW ValidateRect MapVirtualKeyExW GetKeyboardState GetAsyncKeyState GetKeyState OpenClipboard GetWindowRect IsIconic GetClipCursor ClipCursor ShowCursor IsProcessDPIAware MapVirtualKeyW SendInput SetForegroundWindow ChangeDisplaySettingsExW SetWindowPlacement SetWindowDisplayAffinity GetSystemMenu EnableMenuItem GetWindowTextLengthW GetWindowTextW SetWindowTextW RegisterTouchWindow GetRawInputData RegisterRawInputDevices ToUnicodeEx DestroyIcon DestroyCursor CreateIcon MonitorFromPoint EnumDisplayMonitors ShowWindow SetWindowLongW GetWindowLongW AdjustWindowRectEx SystemParametersInfoA SetClipboardData EmptyClipboard GetKeyboardLayout

gdi32

DeleteObject SetPixelFormat ChoosePixelFormat DescribePixelFormat GetDeviceCaps SwapBuffers CreateRectRgn

oleaut32

SysFreeString SysStringLen GetErrorInfo SysAllocStringLen SetErrorInfo VariantClear SafeArrayPutElement SafeArrayCreateVector

uiautomationcore

UiaGetReservedNotSupportedValue UiaRaiseAutomationPropertyChangedEvent UiaLookupId UiaHostProviderFromHwnd UiaReturnRawElementProvider UiaRaiseAutomationEvent

ole32

CoUninitialize RegisterDragDrop OleInitialize CoCreateFreeThreadedMarshaler RevokeDragDrop CoCreateInstance CoInitializeEx

shlwapi

AssocQueryStringW

shell32

DragQueryFileW DragFinish

advapi32

RevertToSelf ImpersonateAnonymousToken

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

bcryptprimitives

ProcessPrng

opengl32

wglDeleteContext wglGetCurrentDC wglGetCurrentContext wglMakeCurrent wglCreateContext wglShareLists wglGetProcAddress

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

imm32

ImmGetContext ImmGetCompositionStringW ImmSetCandidateWindow ImmSetCompositionWindow ImmAssociateContextEx ImmReleaseContext

uxtheme

SetWindowTheme

ntdll

NtCreateNamedPipeFile RtlNtStatusToDosError NtReadFile NtWriteFile NtOpenFile

vcruntime140

__current_exception_context __current_exception __C_specific_handler memcmp memcpy __CxxFrameHandler3 _CxxThrowException memmove memset

api-ms-win-crt-math-l1-1-0

cosf sinf roundf cos pow round floorf trunc atan2f cbrtf floor _hypotf powf sin ceilf expf acosf __setusermatherr truncf

api-ms-win-crt-string-l1-1-0

strlen wcslen

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _get_initial_narrow_environment _set_app_type _seh_filter_exe exit _initterm_e _initialize_narrow_environment _exit terminate strerror __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _crt_atexit _register_onexit_function _initterm

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-26_377eebd6dc4dfd1402f30fb8db4c4ef5_akira_cobalt-strike_rusty-stealer_satacom

kernel32

user32

gdi32

oleaut32

uiautomationcore

ole32

shlwapi

shell32

advapi32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

opengl32

dwmapi

imm32

uxtheme

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic