2026-07-08_6cd59faa60cf202e872ecb2d3c715a24_akira_cobalt-strike_icedid_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_6cd59faa60cf202e872ecb2d3c715a24_akira_cobalt-strike_icedid_rusty-stealer
Size 286KB
Sample260708-2ca35say9s
SHA256 534023c0cfb5a802c3409c12f15b9521ff74ccab6e6231256e6055361da791c4
MD5 6cd59faa60cf202e872ecb2d3c715a24
SHA1 324095af9a2df02018bb11feb82627136ae8fc6a
SHA512 f3e4052a763ef88055ef96aa83923f0361abc137d9e87808d5871da04ee22bf30cf2a616041ca1f41c078da92182ea7b6ef017bf99cec4bc08b2cdd9c98d3085
SSDEEP 6144:awnW55ETxHw/M3FOmb3fsuC66Hs1yvQqQJPQDqLlzGq:pnhS/yQSKC1yoRoDqL9
TLSH
T12E54AE17B39564F9ED67C13C86418A56EB72B8920B21DAFF036442253F17BE19F39B20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_6cd59faa60cf202e872ecb2d3c715a24_akira_cobalt-strike_icedid_rusty-stealer

File Explorer

2026-07-08_6cd59faa60cf202e872ecb2d3c715a24_akira_cobalt-strike_icedid_rusty-stealer

.exe 286KB

2026-07-08_6cd59faa60cf202e872ecb2d3c715a24_akira_cobalt-strike_icedid_rusty-stealer

IMPHASH 4646f454a04dfccc943ff585fa807d3e
SHA256 534023c0cfb5a802c3409c12f15b9521ff74ccab6e6231256e6055361da791c4
MD5 6cd59faa60cf202e872ecb2d3c715a24
SHA1 324095af9a2df02018bb11feb82627136ae8fc6a
SHA512 f3e4052a763ef88055ef96aa83923f0361abc137d9e87808d5871da04ee22bf30cf2a616041ca1f41c078da92182ea7b6ef017bf99cec4bc08b2cdd9c98d3085
SSDEEP 6144:awnW55ETxHw/M3FOmb3fsuC66Hs1yvQqQJPQDqLlzGq:pnhS/yQSKC1yoRoDqL9
TLSH
T12E54AE17B39564F9ED67C13C86418A56EB72B8920B21DAFF036442253F17BE19F39B20
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

78704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

kernel32

RaiseException CreateFileW CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject CloseHandle Sleep AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetCurrentThreadId GetLastError SetLastError GetEnvironmentVariableW GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress GetCurrentProcess lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetModuleHandleA ExitProcess SetFilePointerEx FlushFileBuffers HeapSize QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RtlPcToFileHeader WriteFile GetModuleFileNameW TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW

ntdll

NtWriteFile RtlNtStatusToDosError

Name

.text

Size

132KB

Virtual Size

131KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text._Z

Size

512B

Virtual Size

92B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

138KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_6cd59faa60cf202e872ecb2d3c715a24_akira_cobalt-strike_icedid_rusty-stealer

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

generic