add743650bc1f5c73f974b40aa2b1be3e0774e687aa762f60f341fc6de21fc7b

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/07/2026, 04:31

Target
2026-07-03_09c8672804033e25e926219a54fd7775_akira_rusty-stealer.exe
Size 470KB
Sample260703-e5kfysgs9n
SHA256 add743650bc1f5c73f974b40aa2b1be3e0774e687aa762f60f341fc6de21fc7b
MD5 09c8672804033e25e926219a54fd7775
SHA1 d62400239a37ed12c813e6b285508715844d214f
SHA512 2d5f4128789fd934c6de988e7a89ebabefef42afc080265204f4b8245b158c0bb2f8bbfd4e5eb33454c9ca5088c2d7d8ed5f0ccd8fd26a3b4f8985cd54702797
SSDEEP 6144:9AS6QkMzh39Uazf+cEcj2DaZ4XrQbCPgfhxLQYYGD4s3LCuJrioAqq/cxGCe9DzC:9/kIfba+ZC+QoDTrnADiKAOjO6
TLSH
T17CA47C56BA5694BCD01AC078C306D573BAB6748A0B32B9FB16D896343F15EE06F3CB14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 6028 wrote to memory of 5488	6028	2026-07-03_09c8672804033e25e926219a54fd7775_akira_rusty-stealer.exe	89
PID 5488 wrote to memory of 5624	5488	cmd.exe	90

C:\Users\Admin\AppData\Local\Temp\2026-07-03_09c8672804033e25e926219a54fd7775_akira_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-03_09c8672804033e25e926219a54fd7775_akira_rusty-stealer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:6028
- C:\Windows\system32\cmd.exe
  "cmd" /c "chcp 65001 >nul"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5488
- - C:\Windows\system32\chcp.com
    chcp 65001
    3⤵
    PID:5624