2026-07-11_7b9ac8b4d3f0f0fba60214a9ffe72b7a_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_7b9ac8b4d3f0f0fba60214a9ffe72b7a_akira_cobalt-strike_rusty-stealer_satacom
Size 1.8MB
Sample260711-e3b2ssbw2p
SHA256 0e8d946c5ea7f9c098a7542a8930a43124423b2e48551a3916b029495fe0d625
MD5 7b9ac8b4d3f0f0fba60214a9ffe72b7a
SHA1 8f4acf689ff82cd6b4fd4547ff01a766fc11358f
SHA512 901ff94ce2830d15ce4700b02a051c7f5030f8d66764ddfb4c4d6637931e2f2f9a726d890233d800cea251ea24fab5fb6ab06eff065bac881414b75573aba90b
SSDEEP 49152:ukMT+W2q1uc3kCoHWGqZnphtBRdYNkLhq5R9e:hM6W2q1ZYHwZnlBMCLgxe
TLSH
T1E295234AB58E21ADE849C070C11552B7FA3178D92F3265EF11A983792F63ADD3E39F04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_7b9ac8b4d3f0f0fba60214a9ffe72b7a_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-11_7b9ac8b4d3f0f0fba60214a9ffe72b7a_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.8MB

2026-07-11_7b9ac8b4d3f0f0fba60214a9ffe72b7a_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 0546c69050e4c23c413d56dc332a1917
SHA256 0e8d946c5ea7f9c098a7542a8930a43124423b2e48551a3916b029495fe0d625
MD5 7b9ac8b4d3f0f0fba60214a9ffe72b7a
SHA1 8f4acf689ff82cd6b4fd4547ff01a766fc11358f
SHA512 901ff94ce2830d15ce4700b02a051c7f5030f8d66764ddfb4c4d6637931e2f2f9a726d890233d800cea251ea24fab5fb6ab06eff065bac881414b75573aba90b
SSDEEP 49152:ukMT+W2q1uc3kCoHWGqZnphtBRdYNkLhq5R9e:hM6W2q1ZYHwZnlBMCLgxe
TLSH
T1E295234AB58E21ADE849C070C11552B7FA3178D92F3265EF11A983792F63ADD3E39F04
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

109696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

stub.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetCurrentProcessId QueryPerformanceCounter GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind HeapReAlloc GetFileInformationByHandle GetFileInformationByHandleEx GetLastError HeapFree GetProcessHeap GetStdHandle SetFileTime CreateFileW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW SetFileInformationByHandle lstrlenW WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex GetCurrentThreadId HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW GetFullPathNameW SetLastError GetModuleHandleA GetSystemTimeAsFileTime WaitForSingleObject InitializeSListHead SetUnhandledExceptionFilter VirtualProtect GetProcAddress LoadLibraryA VirtualFree VirtualAlloc CloseHandle

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile

vcruntime140

__C_specific_handler __CxxFrameHandler3 memcpy __current_exception_context __current_exception memset _CxxThrowException memcmp memmove

api-ms-win-crt-runtime-l1-1-0

_initterm _get_initial_narrow_environment _initialize_narrow_environment _initterm_e exit _exit _set_app_type _register_onexit_function __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv _seh_filter_exe _crt_atexit terminate _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_7b9ac8b4d3f0f0fba60214a9ffe72b7a_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic