2026-07-08_f9d92e08fc32e2cf114eed08576ce1e0_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_f9d92e08fc32e2cf114eed08576ce1e0_akira_cobalt-strike_rusty-stealer_satacom
Size 169KB
Sample260708-cf3j5ahs8s
SHA256 8e5434477cd827d535121307bca3dc3781f7f0615b5fbb78c8d077df0b25c07f
MD5 f9d92e08fc32e2cf114eed08576ce1e0
SHA1 1c6a6cbe83d5edbfd10f38fb7ca108bad094ab6c
SHA512 cf55c8eae37ec478406abcc4a8aadcf002f81ad037e2b2b6c78988ccf673081b62323b8e997ec99b48fed284f3f447b2419cfa4ea7559321b056a8bab29d5ecb
SSDEEP 3072:VZ/WSEOPQKMA/fSwOWTDYrN6BI0/dRLM5HI+Y6cucY:b4sQKMu7pDYrNYfLuHI+Y6cuc
TLSH
T1FA049E12B69550F9E44BC078C3158972BA7670CA0B2169FF07A402382F5DBFA7F3DA18
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_f9d92e08fc32e2cf114eed08576ce1e0_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-08_f9d92e08fc32e2cf114eed08576ce1e0_akira_cobalt-strike_rusty-stealer_satacom

.exe 169KB

2026-07-08_f9d92e08fc32e2cf114eed08576ce1e0_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 0e29a7a8a0cb866ba4cac93f4012408f
SHA256 8e5434477cd827d535121307bca3dc3781f7f0615b5fbb78c8d077df0b25c07f
MD5 f9d92e08fc32e2cf114eed08576ce1e0
SHA1 1c6a6cbe83d5edbfd10f38fb7ca108bad094ab6c
SHA512 cf55c8eae37ec478406abcc4a8aadcf002f81ad037e2b2b6c78988ccf673081b62323b8e997ec99b48fed284f3f447b2419cfa4ea7559321b056a8bab29d5ecb
SSDEEP 3072:VZ/WSEOPQKMA/fSwOWTDYrN6BI0/dRLM5HI+Y6cucY:b4sQKMu7pDYrNYfLuHI+Y6cuc
TLSH
T1FA049E12B69550F9E44BC078C3158972BA7670CA0B2169FF07A402382F5DBFA7F3DA18
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

95728

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

payload.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ntdll

NtQueueApcThread NtProtectVirtualMemory NtResumeThread NtWriteVirtualMemory NtAllocateVirtualMemory RtlCaptureContext RtlLookupFunctionEntry NtQuerySystemInformation RtlVirtualUnwind NtWriteFile RtlNtStatusToDosError

advapi32

RegCloseKey RegSetValueExW RegOpenKeyExW SystemFunction036

kernel32

GetModuleHandleA WriteConsoleW MultiByteToWideChar WaitForSingleObject GetConsoleOutputCP QueryPerformanceCounter GetStdHandle WideCharToMultiByte ReleaseMutex CreateMutexA GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetConsoleMode GetCurrentProcessId GetModuleHandleW OpenProcess VirtualFreeEx CreateToolhelp32Snapshot Thread32First Thread32Next CloseHandle OpenThread IsDebuggerPresent GetCurrentThread GetThreadContext GetSystemInfo GlobalMemoryStatusEx GetTickCount GetDiskFreeSpaceExW Sleep CreateProcessW ReadProcessMemory DebugActiveProcessStop TerminateProcess VirtualProtect GetProcAddress InitializeProcThreadAttributeList GetProcessHeap HeapAlloc UpdateProcThreadAttribute HeapFree GetModuleFileNameW GetEnvironmentVariableW CreateDirectoryW SetFileAttributesW CopyFileW AddVectoredExceptionHandler SetThreadStackGuarantee HeapReAlloc GetLastError SetLastError GetCurrentThreadId GetCurrentDirectoryW GetCurrentProcess WaitForSingleObjectEx LoadLibraryA lstrlenW

user32

GetCursorPos

bcrypt

BCryptGenRandom

vcruntime140

__current_exception_context __current_exception memcmp memcpy memmove memset _CxxThrowException __C_specific_handler __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _seh_filter_exe _set_app_type terminate _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _initialize_onexit_table __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv _register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_f9d92e08fc32e2cf114eed08576ce1e0_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

ntdll

advapi32

kernel32

user32

bcrypt

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic