2026-07-20_d4b48c796417678979709f7db1e3a91e_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_d4b48c796417678979709f7db1e3a91e_akira_rusty-stealer
Size 3.9MB
Sample260720-vfb2aagx6m
SHA256 0cfe9db0a71a593af2f1766140311bb6fba646f3e0b7b221531ab7963277b347
MD5 d4b48c796417678979709f7db1e3a91e
SHA1 74981655c04576c2a464b7947f87e5c2976fa2ae
SHA512 84d36e49297e96d4bf88b22646a71ddd4ad2842522b6870ee700df21a00cd0b02734b93a96c0737b3aefc9706898c3e492119f5790c591300ad79aa9bee6eeb1
SSDEEP 49152:ttweOXFwzOdST0OZFy6Z6AqZprBiDIpv5BII36j/gRQoeeU3zB/95G+++++++++6:hnqpjBINj/qZeB/kz2E
TLSH
T16C1607217A5A98ACC05AC47093468A729A3530DF1B35B9FF44D492393FB9AF41F3C369
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_d4b48c796417678979709f7db1e3a91e_akira_rusty-stealer

File Explorer

2026-07-20_d4b48c796417678979709f7db1e3a91e_akira_rusty-stealer

.exe 3.9MB

2026-07-20_d4b48c796417678979709f7db1e3a91e_akira_rusty-stealer

IMPHASH f414919c8c5d2573d1cd14daae6aff9c
SHA256 0cfe9db0a71a593af2f1766140311bb6fba646f3e0b7b221531ab7963277b347
MD5 d4b48c796417678979709f7db1e3a91e
SHA1 74981655c04576c2a464b7947f87e5c2976fa2ae
SHA512 84d36e49297e96d4bf88b22646a71ddd4ad2842522b6870ee700df21a00cd0b02734b93a96c0737b3aefc9706898c3e492119f5790c591300ad79aa9bee6eeb1
SSDEEP 49152:ttweOXFwzOdST0OZFy6Z6AqZprBiDIpv5BII36j/gRQoeeU3zB/95G+++++++++6:hnqpjBINj/qZeB/kz2E
TLSH
T16C1607217A5A98ACC05AC47093468A729A3530DF1B35B9FF44D492393FB9AF41F3C369
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2931852

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

lightspeed.pdb

kernel32

SetFileCompletionNotificationModes CreateIoCompletionPort GetModuleHandleA GetProcAddress IsProcessorFeaturePresent GetSystemTimeAsFileTime Sleep GetQueuedCompletionStatusEx CompareStringOrdinal WaitForSingleObject FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError ReadFile GetCurrentThreadId SetFileInformationByHandle SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetOverlappedResult InitializeSListHead ReadFileEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetStdHandle CreateDirectoryW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW PostQueuedCompletionStatus lstrlenW SetHandleInformation GetFullPathNameW FindFirstFileExW FindClose ExitProcess GetSystemInfo SwitchToThread WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex GetFinalPathNameByHandleW HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer GetFileAttributesW GetFileType GetModuleHandleW FormatMessageW GetModuleFileNameW DuplicateHandle GetCurrentProcess WaitForMultipleObjects SetConsoleCtrlHandler SetConsoleTextAttribute GetConsoleScreenBufferInfo GetLastError SetConsoleMode GetConsoleMode CreateFileW CloseHandle IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcessId GetTimeZoneInformationForYear SetUnhandledExceptionFilter

ws2_32

getaddrinfo socket WSAGetLastError freeaddrinfo WSAStartup WSAIoctl WSACleanup bind WSASocketW sendto connect ioctlsocket recvfrom getsockopt getsockname send closesocket shutdown

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ntdll

NtCreateNamedPipeFile NtCancelIoFileEx NtOpenFile RtlNtStatusToDosError NtDeviceIoControlFile NtCreateFile NtWriteFile NtReadFile

bcryptprimitives

ProcessPrng

vcruntime140

__current_exception_context __current_exception __C_specific_handler _CxxThrowException memset memcmp __CxxFrameHandler3 memmove memcpy

api-ms-win-crt-math-l1-1-0

roundf __setusermatherr round pow ceil

api-ms-win-crt-runtime-l1-1-0

_c_exit _initterm_e terminate _crt_atexit _register_onexit_function _initialize_onexit_table _initterm __p___argc _seh_filter_exe _register_thread_local_exe_atexit_callback _get_initial_narrow_environment _cexit __p___argv _set_app_type _configure_narrow_argv _initialize_narrow_environment _exit exit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_d4b48c796417678979709f7db1e3a91e_akira_rusty-stealer

kernel32

ws2_32

api-ms-win-core-synch-l1-2-0

ntdll

bcryptprimitives

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic