2026-07-09_c701abfb4c8c35c8b39643c43ce494ba_akira_icedid_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-09_c701abfb4c8c35c8b39643c43ce494ba_akira_icedid_rusty-stealer
Size 2.7MB
Sample260709-b99pvsbv9m
SHA256 609240f5385107474489fb52383d4161a1e50be5317545d0797ef4ca39217f54
MD5 c701abfb4c8c35c8b39643c43ce494ba
SHA1 4fb7d60e916d2ee8dbb852875a56070408269882
SHA512 01de0e2df8065329d701f9effd5395a06f0015dd84dcffe73505e2c3c2fa413bbe0da629d32a97afe11837f7154f1e2ccabbb9e7bd2504a5fb4bc6218ffe4a26
SSDEEP 49152:yX/p6nhEegnya3F9JxHls6qzXMTikssGLpt1j4MYPVyGLH:sIhEegnya3F9JRpqYTikssGLpYVD
TLSH
T1F0D528117A4A7BA8C15ACC7C83764A625E313CCB0B35A8FF458471752F79AF71A38E18
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_c701abfb4c8c35c8b39643c43ce494ba_akira_icedid_rusty-stealer

File Explorer

2026-07-09_c701abfb4c8c35c8b39643c43ce494ba_akira_icedid_rusty-stealer

.exe 2.7MB

2026-07-09_c701abfb4c8c35c8b39643c43ce494ba_akira_icedid_rusty-stealer

IMPHASH f53184cf4065288a30131f219456a051
SHA256 609240f5385107474489fb52383d4161a1e50be5317545d0797ef4ca39217f54
MD5 c701abfb4c8c35c8b39643c43ce494ba
SHA1 4fb7d60e916d2ee8dbb852875a56070408269882
SHA512 01de0e2df8065329d701f9effd5395a06f0015dd84dcffe73505e2c3c2fa413bbe0da629d32a97afe11837f7154f1e2ccabbb9e7bd2504a5fb4bc6218ffe4a26
SSDEEP 49152:yX/p6nhEegnya3F9JxHls6qzXMTikssGLpt1j4MYPVyGLH:sIhEegnya3F9JRpqYTikssGLpYVD
TLSH
T1F0D528117A4A7BA8C15ACC7C83764A625E313CCB0B35A8FF458471752F79AF71A38E18
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1331716

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

DiscordSystemHelper.pdb

kernel32

IsValidCodePage CreateMutexW GetCurrentProcess SetPriorityClass GetStringTypeW GetModuleHandleW GetCurrentThread GetFinalPathNameByHandleW InitializeCriticalSectionEx QueryPerformanceFrequency InitializeCriticalSectionAndSpinCount DeleteCriticalSection QueryFullProcessImageNameW LeaveCriticalSection CompareStringW LCMapStringW GetACP DisconnectNamedPipe GetExitCodeProcess OpenProcess SetDllDirectoryW SetDefaultDllDirectories GetActiveProcessorCount GetLastError ConnectNamedPipe QueryPerformanceCounter SetLastError CreateNamedPipeW SetNamedPipeHandleState CreateEventW CreateFileW GetSystemInfo WriteFile FlushFileBuffers CancelIoEx GetOverlappedResult WaitForSingleObject GetOEMCP ReadFile GetNamedPipeClientProcessId GetNamedPipeServerProcessId CloseHandle GetCPInfo EnterCriticalSection CancelIo SetStdHandle GetProcessHeap HeapAlloc HeapFree RtlPcToFileHeader RtlUnwindEx SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead LoadLibraryExA FormatMessageW GetConsoleMode SetConsoleMode SetConsoleTextAttribute GetConsoleScreenBufferInfo RaiseException GetTimeZoneInformationForYear HeapReAlloc lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx SetFileInformationByHandle EncodePointer HeapSize FlsFree FlsSetValue AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetCommandLineW FlsGetValue FlsAlloc GetCommandLineA GetModuleHandleExW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc IsProcessorFeaturePresent GetStartupInfoW RemoveDirectoryW CopyFileExW MoveFileExW CreateDirectoryW GetFileInformationByHandleEx GetSystemTimeAsFileTime SwitchToThread GetFileInformationByHandle DeleteFileW FindFirstFileExW FindClose GetFileType SetEnvironmentVariableW FreeLibrary VirtualQuery VirtualProtect FindNextFileW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess GetFullPathNameW GetCurrentThreadId GetModuleHandleA GetModuleFileNameW ExitProcess GetSystemTimePreciseAsFileTime MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep CreateThread FreeEnvironmentStringsW

advapi32

CreateProcessAsUserW OpenTraceW OpenSCManagerW OpenServiceW CreateServiceW ChangeServiceConfigW CloseServiceHandle ChangeServiceConfig2W ConvertStringSecurityDescriptorToSecurityDescriptorW SetServiceObjectSecurity ImpersonateNamedPipeClient CloseTrace ProcessTrace StartTraceW TraceQueryInformation EnableTraceEx2 ControlTraceW TraceSetInformation QueryServiceStatus StartServiceW RevertToSelf AdjustTokenPrivileges LookupPrivilegeValueW FreeSid CheckTokenMembership AllocateAndInitializeSid GetTokenInformation OpenProcessToken StartServiceCtrlDispatcherW DuplicateTokenEx OpenThreadToken SetServiceStatus RegisterServiceCtrlHandlerExW DeleteService

user32

TranslateMessage GetRawInputDeviceInfoW SetForegroundWindow GetForegroundWindow GetWindowThreadProcessId CreateWindowExW PostQuitMessage RegisterClassW GetMessageW GetRawInputData DefWindowProcW GetWindowLongPtrW SetWindowLongPtrW RegisterRawInputDevices DispatchMessageW PostMessageW

gdi32

D3DKMTSetProcessSchedulingPriorityClass

shell32

ShellExecuteExW SHGetKnownFolderPath

ole32

CoTaskMemFree

oleaut32

SysStringLen SysFreeString GetErrorInfo

ntdll

NtWriteFile RtlNtStatusToDosError

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

422KB

Virtual Size

422KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

280KB

Virtual Size

279KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

572KB

Virtual Size

576KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-09_c701abfb4c8c35c8b39643c43ce494ba_akira_icedid_rusty-stealer

kernel32

advapi32

user32

gdi32

shell32

ole32

oleaut32

ntdll

generic