2026-07-12_5ee7a8db6c66bbce3d26bd2e69f52f34_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-12_5ee7a8db6c66bbce3d26bd2e69f52f34_akira_cobalt-strike_rusty-stealer_satacom
Size 122KB
Sample260712-qa9cdaat7n
SHA256 d055e57311388b0ed873fb6852872ae4de6186034940d5e027ca6b4e8b4f5b74
MD5 5ee7a8db6c66bbce3d26bd2e69f52f34
SHA1 e4c47eb4e7726b28f3a7fd4df63e0582c2d97a98
SHA512 c5ce6fc14ac6940ce540ecf2fc56f0fd562da2bfc5d0f3d5e6fc5ced09bd33db3f775bdb2fbfe4a41e8c3e6f47f667fe72cdc95c420211937f57efe626837e18
SSDEEP 3072:bTODWKMiBLRjY9D4UmynHgpcwl4HITxB3:3ODWKM8LRulnHtwl4oTv
TLSH
T1A3C36C237551A1FCD40AC07482554AA6A776B8DA1B322BFF17D442382F6CEE61F3CB58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-12_5ee7a8db6c66bbce3d26bd2e69f52f34_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-12_5ee7a8db6c66bbce3d26bd2e69f52f34_akira_cobalt-strike_rusty-stealer_satacom

.exe 122KB

2026-07-12_5ee7a8db6c66bbce3d26bd2e69f52f34_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 647d7f028030bbf9142cd2eb332713e1
SHA256 d055e57311388b0ed873fb6852872ae4de6186034940d5e027ca6b4e8b4f5b74
MD5 5ee7a8db6c66bbce3d26bd2e69f52f34
SHA1 e4c47eb4e7726b28f3a7fd4df63e0582c2d97a98
SHA512 c5ce6fc14ac6940ce540ecf2fc56f0fd562da2bfc5d0f3d5e6fc5ced09bd33db3f775bdb2fbfe4a41e8c3e6f47f667fe72cdc95c420211937f57efe626837e18
SSDEEP 3072:bTODWKMiBLRjY9D4UmynHgpcwl4HITxB3:3ODWKM8LRulnHtwl4oTv
TLSH
T1A3C36C237551A1FCD40AC07482554AA6A776B8DA1B322BFF17D442382F6CEE61F3CB58
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

86544

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

omnitrix.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

ntdll

RtlCaptureContext RtlVirtualUnwind RtlLookupFunctionEntry RtlNtStatusToDosError NtWriteFile

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId CreateMutexA LoadLibraryA WaitForSingleObjectEx HeapAlloc VirtualAlloc GetCurrentProcess WriteProcessMemory CreateThread WaitForSingleObject CloseHandle GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread QueryPerformanceCounter SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetStdHandle GetCurrentProcessId GetProcessHeap HeapFree HeapReAlloc lstrlenW ReleaseMutex GetConsoleMode GetModuleHandleW IsProcessorFeaturePresent MultiByteToWideChar WriteConsoleW WideCharToMultiByte GetModuleHandleA GetProcAddress

vcruntime140

memcmp memmove __current_exception __C_specific_handler memset memcpy __CxxFrameHandler3 _CxxThrowException __current_exception_context

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe terminate _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Name

.text

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

680B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

text

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

668B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-12_5ee7a8db6c66bbce3d26bd2e69f52f34_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

ntdll

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic