2026-06-30_0a413fa7ca09bc3d030e47a5eef54cfa_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-30_0a413fa7ca09bc3d030e47a5eef54cfa_akira_cobalt-strike_rusty-stealer_satacom
Size 620KB
Sample260701-a855lsbx6k
SHA256 de2aaaee098e902a77238092a16d473dd1f38999efb74eaf4d6d3756b3e2dedb
MD5 0a413fa7ca09bc3d030e47a5eef54cfa
SHA1 4896b63879680864106f5e6291b348ca71a9862a
SHA512 180f0c059a5eb7147416e938f874158f71eb7e1003f087f672ea54fbb43655e7594ad8e94955abf35b4c7288063d39c579782e983cfc8008248aebaca756c62d
SSDEEP 12288:l5AKNaOMJlIk6mOMQtTEJgTodvbi2Lu8jJZm2RFTKVd:l5XMJxqXM6owD2Zm2Rsd
TLSH
T1C8D40213FAC580A8D02AC076E1494AF6E67630890F356BEF079546243FAAFF94F39754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-06-30_0a413fa7ca09bc3d030e47a5eef54cfa_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-06-30_0a413fa7ca09bc3d030e47a5eef54cfa_akira_cobalt-strike_rusty-stealer_satacom

.exe 620KB

2026-06-30_0a413fa7ca09bc3d030e47a5eef54cfa_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 0994565d041bb4e2716a01d485fe6e7f
SHA256 de2aaaee098e902a77238092a16d473dd1f38999efb74eaf4d6d3756b3e2dedb
MD5 0a413fa7ca09bc3d030e47a5eef54cfa
SHA1 4896b63879680864106f5e6291b348ca71a9862a
SHA512 180f0c059a5eb7147416e938f874158f71eb7e1003f087f672ea54fbb43655e7594ad8e94955abf35b4c7288063d39c579782e983cfc8008248aebaca756c62d
SSDEEP 12288:l5AKNaOMJlIk6mOMQtTEJgTodvbi2Lu8jJZm2RFTKVd:l5XMJxqXM6owD2Zm2Rsd
TLSH
T1C8D40213FAC580A8D02AC076E1494AF6E67630890F356BEF079546243FAAFF94F39754
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c2:f2:5b:c2:68:5f:42:27:1d:8a:36:bd:0e:09:7d:ee:bd:9e:04:94

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation

Chains

Jun 29, 2026

CN=Microsoft Corporation

Subject

CN=Microsoft Corporation

Serial Number

40:70:8e:b2:bc:8d:b4:92:40:07:c6:52:4b:19:be:23

Issuer

CN=Microsoft Corporation

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 14, 2026 - Apr 14, 2027

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

109584

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rust_loader.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

advapi32

SystemFunction036

kernel32

GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter CloseHandle CreateProcessA GetLastError WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex DeleteFileW HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep GetModuleHandleW FormatMessageW GetModuleHandleA GetTempPathW

bcrypt

BCryptGenRandom

ntdll

RtlNtStatusToDosError NtWriteFile

vcruntime140

memcpy memcmp __current_exception __C_specific_handler _CxxThrowException __current_exception_context __CxxFrameHandler3 memmove memset

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type _crt_atexit _configure_narrow_argv _get_initial_narrow_environment _initterm _initterm_e exit _exit _c_exit __p___argc __p___argv _cexit _register_onexit_function _register_thread_local_exe_atexit_callback terminate _initialize_narrow_environment _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-30_0a413fa7ca09bc3d030e47a5eef54cfa_akira_cobalt-strike_rusty-stealer_satacom

PE Signature issue

api-ms-win-core-synch-l1-2-0

advapi32

kernel32

bcrypt

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic