General
- Target 2026-07-11_7b3fe661e99622e4b025505d8c4e20ee_akira_rusty-stealer
- Size 294KB
- Sample260711-e3c9vsbw2q
- SHA256 6f4e7d8020e9623ee7790bd3c7ba72a2a3c7cd918eb5e8b151b0c4be10dd5a1b
- MD5 7b3fe661e99622e4b025505d8c4e20ee
- SHA1 eceb2bb3c6106e234275d1956e58cf47cd5e9b33
- SHA512 070754a33d38d5997e1d2896290af0e7032f356dda5533d5dc338706f5e7d174afd302b755000a6e20662fa5e106fc4b04ebc7808e36f29a223e694dc49022c6
- SSDEEP 3072:cmL4FGDjHpCBDCCl+wnAB7asuAOhJ3VVjqaJxm/f3mrmEmxjeP168uBgxCgQ1uf:cADjHpCNCQ0NhuAQjjXm/zFG6mAgl
- TLSH T139546B13B68448B8D45AC078834A85B36A7274CA4B25B5FF1BD542243F6AFE57F3D708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_7b3fe661e99622e4b025505d8c4e20ee_akira_rusty-stealer.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_7b3fe661e99622e4b025505d8c4e20ee_akira_rusty-stealer.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_7b3fe661e99622e4b025505d8c4e20ee_akira_rusty-stealer
- Size 294KB
- SHA256 6f4e7d8020e9623ee7790bd3c7ba72a2a3c7cd918eb5e8b151b0c4be10dd5a1b
- MD5 7b3fe661e99622e4b025505d8c4e20ee
- SHA1 eceb2bb3c6106e234275d1956e58cf47cd5e9b33
- SHA512 070754a33d38d5997e1d2896290af0e7032f356dda5533d5dc338706f5e7d174afd302b755000a6e20662fa5e106fc4b04ebc7808e36f29a223e694dc49022c6
- SSDEEP 3072:cmL4FGDjHpCBDCCl+wnAB7asuAOhJ3VVjqaJxm/f3mrmEmxjeP168uBgxCgQ1uf:cADjHpCNCQ0NhuAQjjXm/zFG6mAgl
- TLSH T139546B13B68448B8D45AC078834A85B36A7274CA4B25B5FF1BD542243F6AFE57F3D708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Identifies Xen via ACPI registry values (likely anti-VM)
-
Looks for VMWare services registry key.
-
Looks for Xen service registry key.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.