2026-07-14_0eb5cd583fdfb063ee842082644e2bdd_akira_cobalt-strike_icedid_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-14_0eb5cd583fdfb063ee842082644e2bdd_akira_cobalt-strike_icedid_rusty-stealer_satacom
Size 2.5MB
Sample260714-e6vy3sgw4v
SHA256 9861b9ca2ec325ae0e66eca89d027f2977c1822c1333130c5e2c3ed37b6cdd2d
MD5 0eb5cd583fdfb063ee842082644e2bdd
SHA1 b1ca874a2872a3b0885c43e0862bbbc3a05eca2a
SHA512 5ff406e0bcd9115dd0da3a43301816cb15f8cf19341d64684a41e784edc72c0ede1937c54efb792b7ba0fc1f30b85fe1187640af1e450924c53de86113c3bba6
SSDEEP 49152:zZEXurRHg9orv/oKCQOydhYMJucKK6q3MqCc/9kDe8:zauTv/oFQOyrYMkcKzjw9kx
TLSH
T12FC5AE0AF1534AD5CC9BC0BC839B7131EB357D79CE282E9B17918B613E45B806725F8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-14_0eb5cd583fdfb063ee842082644e2bdd_akira_cobalt-strike_icedid_rusty-stealer_satacom

File Explorer

2026-07-14_0eb5cd583fdfb063ee842082644e2bdd_akira_cobalt-strike_icedid_rusty-stealer_satacom

.exe 2.5MB

2026-07-14_0eb5cd583fdfb063ee842082644e2bdd_akira_cobalt-strike_icedid_rusty-stealer_satacom

IMPHASH c54739dd9a8f91587d1726d533b0ad4f
SHA256 9861b9ca2ec325ae0e66eca89d027f2977c1822c1333130c5e2c3ed37b6cdd2d
MD5 0eb5cd583fdfb063ee842082644e2bdd
SHA1 b1ca874a2872a3b0885c43e0862bbbc3a05eca2a
SHA512 5ff406e0bcd9115dd0da3a43301816cb15f8cf19341d64684a41e784edc72c0ede1937c54efb792b7ba0fc1f30b85fe1187640af1e450924c53de86113c3bba6
SSDEEP 49152:zZEXurRHg9orv/oKCQOydhYMJucKK6q3MqCc/9kDe8:zauTv/oFQOyrYMkcKzjw9kx
TLSH
T12FC5AE0AF1534AD5CC9BC0BC839B7131EB357D79CE282E9B17918B613E45B806725F8A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

864876

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

advapi32

RegEnumKeyExW RegCloseKey GetUserNameW RegQueryValueExW RegOpenKeyExW

kernel32

GetStartupInfoW LCMapStringW HeapSize SetUnhandledExceptionFilter InitializeSListHead RtlUnwindEx SystemTimeToTzSpecificLocalTime SystemTimeToFileTime GetUserDefaultUILanguage GetModuleHandleA GetProcAddress LocalFree GetModuleHandleW CreateProcessW CloseHandle GetComputerNameExW LoadLibraryExW FreeLibrary GetProcessHeap HeapFree GetLastError LoadLibraryExA FormatMessageW HeapAlloc GetCurrentThread HeapReAlloc SetFileInformationByHandle FlushFileBuffers GetCurrentProcess SetFilePointerEx WaitForSingleObject FreeEnvironmentStringsW GetEnvironmentStringsW CreateFileW GetFileInformationByHandleEx GetFileInformationByHandle FindFirstFileExW FindClose FindNextFileW GetSystemTimePreciseAsFileTime ExitProcess GetCurrentProcessId GetCurrentThreadId ReleaseMutex GetStdHandle CreateWaitableTimerExW SetWaitableTimer Sleep SetLastError GetFullPathNameW GetModuleFileNameW GetCurrentDirectoryW GetEnvironmentVariableW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP WideCharToMultiByte SetEnvironmentVariableW GetCommandLineW QueryPerformanceFrequency QueryPerformanceCounter lstrlenW WaitForSingleObjectEx LoadLibraryA CreateMutexA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind TerminateProcess CompareStringW VirtualProtect GetStringTypeW GetFileType SetStdHandle GetCPInfo GetOEMCP GetACP IsValidCodePage UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA GetModuleHandleExW WriteFile RtlPcToFileHeader RaiseException EncodePointer DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection FlsFree FlsSetValue FlsGetValue FlsAlloc GetSystemTimeAsFileTime

winhttp

WinHttpSetOption WinHttpReceiveResponse WinHttpQueryHeaders WinHttpQueryDataAvailable WinHttpCloseHandle WinHttpSetTimeouts WinHttpReadData WinHttpOpenRequest WinHttpConnect WinHttpOpen WinHttpSendRequest

user32

EnumDisplaySettingsExW GetKeyboardLayoutList EnumDisplayMonitors GetMonitorInfoW GetDC ReleaseDC

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness

gdi32

DeleteObject GetObjectW StretchBlt SetStretchBltMode SelectObject CreateCompatibleBitmap DeleteDC GetDIBits CreateCompatibleDC CreateDCW GetDeviceCaps

oleaut32

GetErrorInfo SysFreeString SysStringLen

ntdll

RtlNtStatusToDosError NtWriteFile LdrLoadDll RtlOpenCurrentUser NtReadFile

Name

.text

Size

912KB

Virtual Size

912KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

15KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-14_0eb5cd583fdfb063ee842082644e2bdd_akira_cobalt-strike_icedid_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

advapi32

kernel32

winhttp

user32

api-ms-win-shcore-scaling-l1-1-1

gdi32

oleaut32

ntdll

generic