2026-07-18_0df0d21b93d8857864be8b58d0173257_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-18_0df0d21b93d8857864be8b58d0173257_akira_rusty-stealer
Size 491KB
Sample260718-bmb53sbw2n
SHA256 af026dbc9daf795392256da5fb6a5e31089c453f596b76c50d8dc44e40bbad7c
MD5 0df0d21b93d8857864be8b58d0173257
SHA1 9d07ec3a6d7ba04cb84768a03c06b0cf62a0a2d3
SHA512 5bf4f9d6824d9b54f43fdf3f866bc51781eee1d38fc63ed0f9f75811e0b1aab8e3333465430d4b0a4df328407367be745e98c63797d8eb51a749706ea13083c9
SSDEEP 6144:iRQXhqWf9steSSHs6G/1REmcf1hW9c3a2iZkMuDzQYUzsHuCP62b/y8UWYOPiReN:iSXhtfptY5K1QFNsZ6k/y85tXG
TLSH
T148B46C53F6444AFCD05AC474835A5563BA32B4CA0B22F9EF269C42312F66EE65F3D708
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-18_0df0d21b93d8857864be8b58d0173257_akira_rusty-stealer

File Explorer

2026-07-18_0df0d21b93d8857864be8b58d0173257_akira_rusty-stealer

.exe 491KB

2026-07-18_0df0d21b93d8857864be8b58d0173257_akira_rusty-stealer

IMPHASH 633db3af0da1b90f786fde18486be75c
SHA256 af026dbc9daf795392256da5fb6a5e31089c453f596b76c50d8dc44e40bbad7c
MD5 0df0d21b93d8857864be8b58d0173257
SHA1 9d07ec3a6d7ba04cb84768a03c06b0cf62a0a2d3
SHA512 5bf4f9d6824d9b54f43fdf3f866bc51781eee1d38fc63ed0f9f75811e0b1aab8e3333465430d4b0a4df328407367be745e98c63797d8eb51a749706ea13083c9
SSDEEP 6144:iRQXhqWf9steSSHs6G/1REmcf1hW9c3a2iZkMuDzQYUzsHuCP62b/y8UWYOPiReN:iSXhtfptY5K1QFNsZ6k/y85tXG
TLSH
T148B46C53F6444AFCD05AC474835A5563BA32B4CA0B22F9EF269C42312F66EE65F3D708
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

326316

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ffacoreapi.pdb

kernel32

InitializeCriticalSectionAndSpinCount DeleteCriticalSection RaiseException CreateThread AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc WaitForMultipleObjects EncodePointer RtlUnwindEx CreateFileW GetCurrentThreadId GetCurrentDirectoryW TlsSetValue GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA lstrlenW CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind IsProcessorFeaturePresent MultiByteToWideChar HeapAlloc GetEnvironmentVariableW ReadFileEx SleepEx WriteFileEx QueryPerformanceFrequency GetModuleHandleW FormatMessageW QueryPerformanceCounter CompareStringOrdinal GetEnvironmentStringsW FreeEnvironmentStringsW CreateProcessW TlsAlloc GetCommandLineW CreateWaitableTimerExW SetWaitableTimer SetUnhandledExceptionFilter GetExitCodeProcess UnhandledExceptionFilter IsDebuggerPresent WaitForSingleObject GetCurrentProcessId OpenProcess TlsFree FindNextFileW SetFilePointerEx DeleteFileW DuplicateHandle GetFileAttributesW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx FindFirstFileExW SetFileInformationByHandle SetFileTime GetFullPathNameW LoadLibraryExW GetConsoleOutputCP SetLastError GetFileInformationByHandle SetConsoleTextAttribute ReadConsoleInputW GetNumberOfConsoleInputEvents SetConsoleCursorInfo SetConsoleCursorPosition WriteConsoleW SetConsoleCtrlHandler SetConsoleTitleW SetConsoleMode GetConsoleMode GetConsoleWindow FillConsoleOutputAttribute FillConsoleOutputCharacterA SetConsoleWindowInfo GetConsoleScreenBufferInfo GetStdHandle FindClose GetModuleFileNameW TlsGetValue RtlPcToFileHeader GetProcAddress GetModuleHandleA Sleep GetLastError RtlCaptureContext CloseHandle GetSystemTimeAsFileTime FreeLibrary InitializeSListHead TerminateProcess

bcryptprimitives

ProcessPrng

ntdll

NtReadFile NtOpenFile NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

advapi32

RegCloseKey RegDeleteValueW RegOpenKeyExW RegDeleteTreeW RegSetValueExW RegCreateKeyExW

user32

GetForegroundWindow ShowScrollBar GetKeyboardLayout GetSystemMetrics GetWindowRect SetWindowLongW GetWindowLongW DeleteMenu GetSystemMenu GetWindowThreadProcessId ToUnicodeEx SetWindowPos

api-ms-win-crt-math-l1-1-0

log2 __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _seh_filter_exe _register_onexit_function _crt_atexit _c_exit _cexit __p___argv __p___argc _register_thread_local_exe_atexit_callback exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv terminate abort _set_app_type _exit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free malloc calloc _set_new_mode

api-ms-win-crt-string-l1-1-0

strlen wcsncmp strcpy_s strcmp

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-18_0df0d21b93d8857864be8b58d0173257_akira_rusty-stealer

kernel32

bcryptprimitives

ntdll

api-ms-win-core-synch-l1-2-0

advapi32

user32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

generic