af026dbc9daf795392256da5fb6a5e31089c453f596b76c50d8dc44e40bbad7c | Triage™

Login
Reports

Overview

overview

8

Static

static

3

2026-07-18...er.exe

windows10-2004-x64

8

2026-07-18...er.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-18_0df0d21b93d8857864be8b58d0173257_akira_rusty-stealer
Size 491KB
Sample260718-bmb53sbw2n
SHA256 af026dbc9daf795392256da5fb6a5e31089c453f596b76c50d8dc44e40bbad7c
MD5 0df0d21b93d8857864be8b58d0173257
SHA1 9d07ec3a6d7ba04cb84768a03c06b0cf62a0a2d3
SHA512 5bf4f9d6824d9b54f43fdf3f866bc51781eee1d38fc63ed0f9f75811e0b1aab8e3333465430d4b0a4df328407367be745e98c63797d8eb51a749706ea13083c9
SSDEEP 6144:iRQXhqWf9steSSHs6G/1REmcf1hW9c3a2iZkMuDzQYUzsHuCP62b/y8UWYOPiReN:iSXhtfptY5K1QFNsZ6k/y85tXG
TLSH
T148B46C53F6444AFCD05AC474835A5563BA32B4CA0B22F9EF269C42312F66EE65F3D708
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-18_0df0d21b93d8857864be8b58d0173257_akira_rusty-stealer.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

defense_evasion persistence

Behavioral task

behavioral2

Sample

2026-07-18_0df0d21b93d8857864be8b58d0173257_akira_rusty-stealer.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

defense_evasion persistence

Malware Config

Targets

- Target
  2026-07-18_0df0d21b93d8857864be8b58d0173257_akira_rusty-stealer
- Size 491KB
- SHA256 af026dbc9daf795392256da5fb6a5e31089c453f596b76c50d8dc44e40bbad7c
- MD5 0df0d21b93d8857864be8b58d0173257
- SHA1 9d07ec3a6d7ba04cb84768a03c06b0cf62a0a2d3
- SHA512 5bf4f9d6824d9b54f43fdf3f866bc51781eee1d38fc63ed0f9f75811e0b1aab8e3333465430d4b0a4df328407367be745e98c63797d8eb51a749706ea13083c9
- SSDEEP 6144:iRQXhqWf9steSSHs6G/1REmcf1hW9c3a2iZkMuDzQYUzsHuCP62b/y8UWYOPiReN:iSXhtfptY5K1QFNsZ6k/y85tXG
- TLSH
  T148B46C53F6444AFCD05AC474835A5563BA32B4CA0B22F9EF269C42312F66EE65F3D708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion persistence
- Disables RegEdit via registry modification
  defense_evasion
- Disables Task Manager via registry modification
  defense_evasion
- Event Triggered Execution: Image File Execution Options Injection
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionpersistence

behavioral2

defense_evasionpersistence

© 2018-2026

Terms | Privacy