2026-07-07_690114df402bcf4a77c087668d014fa2_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-07_690114df402bcf4a77c087668d014fa2_akira_cobalt-strike_rusty-stealer_satacom
Size 734KB
Sample260707-tlkpyahs91
SHA256 a80c8c74fdf6449fbc2e7407f2319965960ecb6607df7db669e061fae454f978
MD5 690114df402bcf4a77c087668d014fa2
SHA1 ce5dfdaaeff911c3b1cab42a5e1b9e35b2555160
SHA512 29d7c355b03a57f7a22922805168e18779340ec6189b565d47b25bbd20be05a2a2aeaa825bbb8b0faa372994580e6d88283c7a2bd9762125ad5c4e58a86e94c2
SSDEEP 6144:uhbyLql0I8OWPsWwa0tFAp5nZ4ssqT2V04ICrNIEctElbeaO6M2hL5Ss:uheWlb8VPuBkntrO
TLSH
T1F0F4F9267A7951D9C1BBC03992579F22B921749E4B397BF705D0823A2F24EF86E3C314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-07_690114df402bcf4a77c087668d014fa2_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-07_690114df402bcf4a77c087668d014fa2_akira_cobalt-strike_rusty-stealer_satacom

.exe 734KB

2026-07-07_690114df402bcf4a77c087668d014fa2_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 1318893f7f476ea48bda951464ccf5c9
SHA256 a80c8c74fdf6449fbc2e7407f2319965960ecb6607df7db669e061fae454f978
MD5 690114df402bcf4a77c087668d014fa2
SHA1 ce5dfdaaeff911c3b1cab42a5e1b9e35b2555160
SHA512 29d7c355b03a57f7a22922805168e18779340ec6189b565d47b25bbd20be05a2a2aeaa825bbb8b0faa372994580e6d88283c7a2bd9762125ad5c4e58a86e94c2
SSDEEP 6144:uhbyLql0I8OWPsWwa0tFAp5nZ4ssqT2V04ICrNIEctElbeaO6M2hL5Ss:uheWlb8VPuBkntrO
TLSH
T1F0F4F9267A7951D9C1BBC03992579F22B921749E4B397BF705D0823A2F24EF86E3C314
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

545552

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

basic.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetFileAttributesW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime CloseHandle LoadLibraryA FreeLibrary GetProcAddress GetLastError CompareStringOrdinal FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetStdHandle CreateDirectoryW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW FindFirstFileExW FindClose WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW WaitForMultipleObjects GetModuleHandleA

ntdll

NtWriteFile NtOpenFile NtReadFile NtCreateNamedPipeFile RtlNtStatusToDosError

vcruntime140

__CxxFrameHandler3 memcmp __current_exception __C_specific_handler memcpy __current_exception_context memmove _CxxThrowException memset

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit terminate _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-07_690114df402bcf4a77c087668d014fa2_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic