2026-07-11_4b52ca7fe81d3b59e9d7f03ac8501f9e_akira_cobalt-strike_icedid_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_4b52ca7fe81d3b59e9d7f03ac8501f9e_akira_cobalt-strike_icedid_rusty-stealer_satacom
Size 962KB
Sample260711-e9yjdadz7w
SHA256 0e20982c6967ef2aa72df71cd6c42590c2387b0117abe4ee7990df6c8022d510
MD5 4b52ca7fe81d3b59e9d7f03ac8501f9e
SHA1 f4ee8a73d56aa31b73a8328ae5a4b711dd28e744
SHA512 d09fe111d7ae8bdb4e849feea9585aaac7c61e740fe5953db4649d8aecd7f470dbb9b81362e8cdf70d9c13a0742815b98158a00d1aafc5a62405766ac5da0eff
SSDEEP 12288:oIqzV7VwChNlVaUxSrsBh8XxbzQePFg424fvRTtlMzdc+Inl:oZzVPZVPsg8Xlzpdl28RTtlMZel
TLSH
T12E25AD06B290BCA5D9068139DED9C6F077227C45DF519ADB11E4BF2B3D3B0E2EE29610
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_4b52ca7fe81d3b59e9d7f03ac8501f9e_akira_cobalt-strike_icedid_rusty-stealer_satacom

File Explorer

2026-07-11_4b52ca7fe81d3b59e9d7f03ac8501f9e_akira_cobalt-strike_icedid_rusty-stealer_satacom

.exe 962KB

2026-07-11_4b52ca7fe81d3b59e9d7f03ac8501f9e_akira_cobalt-strike_icedid_rusty-stealer_satacom

IMPHASH 3e125604d439580b097eef1c4e0bdcb3
SHA256 0e20982c6967ef2aa72df71cd6c42590c2387b0117abe4ee7990df6c8022d510
MD5 4b52ca7fe81d3b59e9d7f03ac8501f9e
SHA1 f4ee8a73d56aa31b73a8328ae5a4b711dd28e744
SHA512 d09fe111d7ae8bdb4e849feea9585aaac7c61e740fe5953db4649d8aecd7f470dbb9b81362e8cdf70d9c13a0742815b98158a00d1aafc5a62405766ac5da0eff
SSDEEP 12288:oIqzV7VwChNlVaUxSrsBh8XxbzQePFg424fvRTtlMzdc+Inl:oZzVPZVPsg8Xlzpdl28RTtlMZel
TLSH
T12E25AD06B290BCA5D9068139DED9C6F077227C45DF519ADB11E4BF2B3D3B0E2EE29610
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

99952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Hello.pdb

wininet

InternetOpenUrlW InternetOpenW InternetReadFile InternetCloseHandle

kernel32

SetFilePointerEx SetFileAttributesW CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject CloseHandle Sleep QueryPerformanceFrequency GetModuleFileNameW GetDiskFreeSpaceExW GlobalMemoryStatusEx GetLastError GetTempPathW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetCurrentThreadId SetLastError GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW GetModuleHandleW FormatMessageW QueryPerformanceCounter GetModuleHandleA GetFullPathNameW CreateFileW SetFileTime SetFileInformationByHandle FindFirstFileExW FindClose GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW ExitProcess FlushFileBuffers HeapSize LCMapStringW GetStringTypeW GetFileType SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP CompareStringW LoadLibraryExW GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection WriteFile TerminateProcess FreeLibrary GetModuleHandleExW GetCommandLineA GetCommandLineW IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter FindNextFileW IsValidCodePage GetACP VirtualProtect

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

shell32

ShellExecuteW SHGetFolderPathW

user32

GetCursorPos

winhttp

WinHttpConnect WinHttpOpenRequest WinHttpSetOption WinHttpSendRequest WinHttpReceiveResponse WinHttpCloseHandle WinHttpOpen

ntdll

RtlNtStatusToDosError NtWriteFile

Name

.text

Size

152KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

723KB

Virtual Size

722KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_4b52ca7fe81d3b59e9d7f03ac8501f9e_akira_cobalt-strike_icedid_rusty-stealer_satacom

wininet

kernel32

api-ms-win-core-synch-l1-2-0

shell32

user32

winhttp

ntdll

generic