2026-07-13_45f51177a6307c1b8d83c76cfe0f9b0c_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-13_45f51177a6307c1b8d83c76cfe0f9b0c_akira_rusty-stealer
Size 1.3MB
Sample260713-2kqhssh13l
SHA256 84f02441220c394e12a739798c30dcfe81dc2709b7a81779e7c219335da82847
MD5 45f51177a6307c1b8d83c76cfe0f9b0c
SHA1 2049fd4c415153191848bd282c99d165e87a5085
SHA512 349eccb348ff068828936f0bf3c50f7b3aebd27cb90453875584f367f40a67d4a5d143a5aa79886b533d69e483ee3a516b98f62a0de46769355008b7cc4d7ba7
SSDEEP 24576:vR6X7yy8BoMXFtZnQ/tbw/2Mkjy6Fr7g0o:vYGhB1PZQ/lFTjN4
TLSH
T10655C012A64A90ACD95DC07597478632B93278CE17306AFF23E46B353D6AED22F3D704
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-13_45f51177a6307c1b8d83c76cfe0f9b0c_akira_rusty-stealer

File Explorer

2026-07-13_45f51177a6307c1b8d83c76cfe0f9b0c_akira_rusty-stealer

.exe 1.3MB

2026-07-13_45f51177a6307c1b8d83c76cfe0f9b0c_akira_rusty-stealer

IMPHASH b248d04baae59bdefb4874e56a26abee
SHA256 84f02441220c394e12a739798c30dcfe81dc2709b7a81779e7c219335da82847
MD5 45f51177a6307c1b8d83c76cfe0f9b0c
SHA1 2049fd4c415153191848bd282c99d165e87a5085
SHA512 349eccb348ff068828936f0bf3c50f7b3aebd27cb90453875584f367f40a67d4a5d143a5aa79886b533d69e483ee3a516b98f62a0de46769355008b7cc4d7ba7
SSDEEP 24576:vR6X7yy8BoMXFtZnQ/tbw/2Mkjy6Fr7g0o:vYGhB1PZQ/lFTjN4
TLSH
T10655C012A64A90ACD95DC07597478632B93278CE17306AFF23E46B353D6AED22F3D704
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4992

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CompareStringOrdinal CreateFileMappingA CreateFileW CreateNamedPipeW CreateProcessW CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DuplicateHandle EnterCriticalSection FindClose FindFirstFileExW FormatMessageW FreeEnvironmentStringsW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStdHandle GetSystemDirectoryW GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection LeaveCriticalSection MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar ReadConsoleW ReadFileEx RtlCaptureContext RtlLookupFunctionEntry RtlRestoreContext RtlUnwindEx RtlVirtualUnwind SetFileInformationByHandle SetFilePointerEx SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep SleepEx TlsGetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFileEx __C_specific_handler lstrlenW

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf fflush

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-environment-l1-1-0

__p__environ getenv

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

Name

.text

Size

511KB

Virtual Size

511KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

261KB

Virtual Size

261KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-13_45f51177a6307c1b8d83c76cfe0f9b0c_akira_rusty-stealer

kernel32

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

ntdll

api-ms-win-core-synch-l1-2-0

bcryptprimitives

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-environment-l1-1-0

shell32

ole32

generic