2026-07-05_83370d8857148f823836105ddc5d797a_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_83370d8857148f823836105ddc5d797a_akira_cobalt-strike_rusty-stealer_satacom
Size 1.7MB
Sample260705-d84tbshs5v
SHA256 6715583cd40eeab2ee284947fffd16a9a760e7ce55ec857dbb22b2498a9af6a8
MD5 83370d8857148f823836105ddc5d797a
SHA1 f650cb7ae49516c4b962235625cf2f8ebd2c21bc
SHA512 8ef3556defee65bc893daecd5c813c3e11a1f688f5e7f7988267740e1f01385a10844b70038d6de2a20c20d1797cd82f1e94927e418d71d950aa2b990d4a70e9
SSDEEP 49152:boNZyhYVmzo4DwnlGg4LDyJy2E/Je+UFHdcJK:dAVJyl0tQK
TLSH
T1068506226E5F99BCD1AAC874C3064AB35E2574CB0732BDFF40D855753FA9AA02B39314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_83370d8857148f823836105ddc5d797a_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-05_83370d8857148f823836105ddc5d797a_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.7MB

2026-07-05_83370d8857148f823836105ddc5d797a_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 03a86e53c5d53c2c32a22e27fa863a23
SHA256 6715583cd40eeab2ee284947fffd16a9a760e7ce55ec857dbb22b2498a9af6a8
MD5 83370d8857148f823836105ddc5d797a
SHA1 f650cb7ae49516c4b962235625cf2f8ebd2c21bc
SHA512 8ef3556defee65bc893daecd5c813c3e11a1f688f5e7f7988267740e1f01385a10844b70038d6de2a20c20d1797cd82f1e94927e418d71d950aa2b990d4a70e9
SSDEEP 49152:boNZyhYVmzo4DwnlGg4LDyJy2E/Je+UFHdcJK:dAVJyl0tQK
TLSH
T1068506226E5F99BCD1AAC874C3064AB35E2574CB0732BDFF40D855753FA9AA02B39314
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1395488

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

restore.pdb

bcryptprimitives

ProcessPrng

kernel32

GetModuleHandleA GetProcAddress CloseHandle GetStdHandle GetConsoleMode SetConsoleMode SetConsoleTextAttribute GetConsoleScreenBufferInfo FindClose UnlockFile SetFileInformationByHandle FlushFileBuffers LockFileEx GetCurrentThreadId GetLastError FindNextFileW GetFileType GetConsoleOutputCP WriteConsoleW GetFullPathNameW GetFinalPathNameByHandleW ReleaseMutex CreateMutexA GetCurrentProcessId WaitForSingleObjectEx GetCurrentProcess ExitProcess FindFirstFileExW SetLastError GetCurrentThread SetThreadStackGuarantee CreateDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle SetFileTime CreateFileW GetSystemTimeAsFileTime WaitForSingleObject lstrlenW InitializeSListHead QueryPerformanceCounter FormatMessageW GetModuleHandleW MultiByteToWideChar HeapAlloc LoadLibraryA WideCharToMultiByte SetUnhandledExceptionFilter GetModuleFileNameW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW AddVectoredExceptionHandler RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapReAlloc HeapFree GetProcessHeap

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp memcpy __CxxFrameHandler3 memset memmove longjmp __C_specific_handler __current_exception __current_exception_context _CxxThrowException

api-ms-win-crt-math-l1-1-0

trunc __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table exit _initterm _exit _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __p___argc _set_app_type __p___argv _seh_filter_exe _cexit _c_exit _register_onexit_function _crt_atexit terminate _register_thread_local_exe_atexit_callback _initterm_e

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_83370d8857148f823836105ddc5d797a_akira_cobalt-strike_rusty-stealer_satacom

bcryptprimitives

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic