93b773bf4dae9a194db3ec45ab1cbcd12dec4d98038885896887d70e3796927e

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 04:32

Target
2026-07-08_6d609d6ad06acc9f677b829d0a32838b_akira_rusty-stealer.exe
Size 2.0MB
Sample260708-e59qvabw4r
SHA256 93b773bf4dae9a194db3ec45ab1cbcd12dec4d98038885896887d70e3796927e
MD5 6d609d6ad06acc9f677b829d0a32838b
SHA1 ca7abb9faed3014c29422d4baa59f55862a41694
SHA512 111912c9520de1426a9069839c05742374c47047b2cdc4c976c8c01bdf76c36addec9f81e5e61a05d50c915ccfa5930ec178efa9574d477a3c4b40d49503fb5c
SSDEEP 49152:aqhPuSZdAu8Kfeh5+nN3xpGA5/AE5tgemtXV1FExTFD:9hGEdVycTsuANV
TLSH
T144A53302F51234FAD162C939D69A85E26567F0876F122EFF0B5486312D163FC6F3C62A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2288 wrote to memory of 3552	2288	2026-07-08_6d609d6ad06acc9f677b829d0a32838b_akira_rusty-stealer.exe	85
PID 2288 wrote to memory of 3552	2288	2026-07-08_6d609d6ad06acc9f677b829d0a32838b_akira_rusty-stealer.exe	85
PID 2288 wrote to memory of 3552	2288	2026-07-08_6d609d6ad06acc9f677b829d0a32838b_akira_rusty-stealer.exe	85

C:\Users\Admin\AppData\Local\Temp\2026-07-08_6d609d6ad06acc9f677b829d0a32838b_akira_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-08_6d609d6ad06acc9f677b829d0a32838b_akira_rusty-stealer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2288
- C:\Windows\System32\WerFault.exe
  "C:\Windows\System32\WerFault.exe"
  2⤵
  PID:3552