2026-07-09_2d745348f471565b08767ec4f74d2a1f_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-09_2d745348f471565b08767ec4f74d2a1f_akira_cobalt-strike_rusty-stealer_satacom
Size 238KB
Sample260709-krvmnagt7x
SHA256 7407629a58fa4a75e3066016fc7cc7fff7e6e69a62fc4999d9ffb17ddbcdebde
MD5 2d745348f471565b08767ec4f74d2a1f
SHA1 66700f10bfdfd7a7a3bb25c1093c6cd9b760c9b7
SHA512 bad13b0837f32e30585459e98ee7d32746a40977b44b21bb6f42c17ccc2e2d280e5770f3216bb0b73e208be4fc279d6f7f3098924d3f81e98de3b7004d34104a
SSDEEP 6144:T1oIp/CqBHOkQS76EAkyYszs3dFJ0pttt3zez7yCdlH7:eGC6hQKbSExUO3
TLSH
T198342A227A6A8CBCD85AC4B5C34186736937B4C60B23B9FF1594413D3E6AEF56F38214
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_2d745348f471565b08767ec4f74d2a1f_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-09_2d745348f471565b08767ec4f74d2a1f_akira_cobalt-strike_rusty-stealer_satacom

.exe 238KB

2026-07-09_2d745348f471565b08767ec4f74d2a1f_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH bbe8c4b4892a4450bfbcf4f74a03536d
SHA256 7407629a58fa4a75e3066016fc7cc7fff7e6e69a62fc4999d9ffb17ddbcdebde
MD5 2d745348f471565b08767ec4f74d2a1f
SHA1 66700f10bfdfd7a7a3bb25c1093c6cd9b760c9b7
SHA512 bad13b0837f32e30585459e98ee7d32746a40977b44b21bb6f42c17ccc2e2d280e5770f3216bb0b73e208be4fc279d6f7f3098924d3f81e98de3b7004d34104a
SSDEEP 6144:T1oIp/CqBHOkQS76EAkyYszs3dFJ0pttt3zez7yCdlH7:eGC6hQKbSExUO3
TLSH
T198342A227A6A8CBCD85AC4B5C34186736937B4C60B23B9FF1594413D3E6AEF56F38214
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

175680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

soldr_clang_shim.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

GetExitCodeProcess SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetProcessHeap HeapFree HeapReAlloc CloseHandle lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetLastError GetEnvironmentVariableW GetCommandLineW GetFinalPathNameByHandleW CreateFileW SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx FindFirstFileExW FindClose GetModuleHandleW FormatMessageW GetFullPathNameW GetModuleHandleA GetModuleFileNameW HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleMode GetConsoleOutputCP WaitForSingleObject GetFileAttributesW DuplicateHandle CreateThread GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW ReadFileEx SleepEx WriteFileEx GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind QueryPerformanceCounter

ntdll

NtCreateNamedPipeFile NtOpenFile RtlNtStatusToDosError NtWriteFile

vcruntime140

__C_specific_handler __current_exception memmove memcpy __CxxFrameHandler3 memcmp _CxxThrowException memset __current_exception_context

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment exit _exit _seh_filter_exe _initterm __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv __p___argc _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit terminate _set_app_type _get_initial_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-09_2d745348f471565b08767ec4f74d2a1f_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic