2026-07-19_84bab3369f10687b51d7b6fb9e04ec64_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-19_84bab3369f10687b51d7b6fb9e04ec64_akira_cobalt-strike_rusty-stealer_satacom
Size 157KB
Sample260720-bf6fcaaz5j
SHA256 daa38952109f6de5c07722463f8dd25e85f69f6b7fd66689e362f8262acd9e29
MD5 84bab3369f10687b51d7b6fb9e04ec64
SHA1 600c1e79955b761566b224277d852e3e1b1e226c
SHA512 69f78b5ebbf6f214494d88d96c67b18124caf39d36b63949263e60c2494a58b8a940e250a326a110f4d88ffd77bff23a0aff1b3fc602efce10b02ec7a52922c9
SSDEEP 1536:dtvHIe17Ws7etep+luZQbuIe/mDilzHS2ivJal9O2X4UC+UgFSdWgW9ul2q6P:dtvoe7+ep+luu/oNlLS2oa34g1JvrP
TLSH
T185F35B13B75190FCE05EC03882658673BA7274ED0B226AEF575142382F69EF6AE3C354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-19_84bab3369f10687b51d7b6fb9e04ec64_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-19_84bab3369f10687b51d7b6fb9e04ec64_akira_cobalt-strike_rusty-stealer_satacom

.exe 157KB

2026-07-19_84bab3369f10687b51d7b6fb9e04ec64_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 34f96c9eb09fbc1865f3fed3178aad94
SHA256 daa38952109f6de5c07722463f8dd25e85f69f6b7fd66689e362f8262acd9e29
MD5 84bab3369f10687b51d7b6fb9e04ec64
SHA1 600c1e79955b761566b224277d852e3e1b1e226c
SHA512 69f78b5ebbf6f214494d88d96c67b18124caf39d36b63949263e60c2494a58b8a940e250a326a110f4d88ffd77bff23a0aff1b3fc602efce10b02ec7a52922c9
SSDEEP 1536:dtvHIe17Ws7etep+luZQbuIe/mDilzHS2ivJal9O2X4UC+UgFSdWgW9ul2q6P:dtvoe7+ep+luu/oNlLS2oa34g1JvrP
TLSH
T185F35B13B75190FCE05EC03882658673BA7274ED0B226AEF575142382F69EF6AE3C354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

108128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-d284e8c412cc71ef.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

GetCurrentThreadId SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetProcessHeap HeapFree HeapReAlloc CloseHandle lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex GetLastError WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetConsoleMode GetModuleHandleW FormatMessageW GetModuleHandleA HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memset memcmp __current_exception __C_specific_handler __CxxFrameHandler3 __current_exception_context memcpy _CxxThrowException memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit terminate _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-19_84bab3369f10687b51d7b6fb9e04ec64_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic