2026-07-20_19e0e3d3b616ad15cb0679e9c60315e2_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_19e0e3d3b616ad15cb0679e9c60315e2_akira_cobalt-strike_rusty-stealer_satacom
Size 12.2MB
Sample260720-wp1axact61
SHA256 2fd5da0ec56e330faab9d3825ec35584d573d5c4f6bc00d71ab32de1de2fb91e
MD5 19e0e3d3b616ad15cb0679e9c60315e2
SHA1 881d215da777ef1395fe6c51d6f0403599550133
SHA512 6c54846f654e2c333ecb742e65117a4ce880814924058f50499b1c8f2eb505dac23aefd85a85ecb701b392196161ad8157076455c31645c2fd7080f957f415ec
SSDEEP 196608:GTBaHOXmmjeAyNAJlFJ2xFLAV2NvmddTMi8t7x:EIOXmmjeAyNAJlFJ2fLAV6Vv
TLSH
T158D6D6107B5E9958D1ABC4748747C7720A203CDE0A3568AB40D5BE3F3FBE7F56A28219
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_19e0e3d3b616ad15cb0679e9c60315e2_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-20_19e0e3d3b616ad15cb0679e9c60315e2_akira_cobalt-strike_rusty-stealer_satacom

.exe 12.2MB

2026-07-20_19e0e3d3b616ad15cb0679e9c60315e2_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 72a6c4aaabba7253137d0f1e69022f6c
SHA256 2fd5da0ec56e330faab9d3825ec35584d573d5c4f6bc00d71ab32de1de2fb91e
MD5 19e0e3d3b616ad15cb0679e9c60315e2
SHA1 881d215da777ef1395fe6c51d6f0403599550133
SHA512 6c54846f654e2c333ecb742e65117a4ce880814924058f50499b1c8f2eb505dac23aefd85a85ecb701b392196161ad8157076455c31645c2fd7080f957f415ec
SSDEEP 196608:GTBaHOXmmjeAyNAJlFJ2xFLAV2NvmddTMi8t7x:EIOXmmjeAyNAJlFJ2fLAV6Vv
TLSH
T158D6D6107B5E9958D1ABC4748747C7720A203CDE0A3568AB40D5BE3F3FBE7F56A28219
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5917584

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dxwrapper_toggle.pdb

bcryptprimitives

ProcessPrng

advapi32

EventRegister RegCloseKey EventUnregister EventWriteTransfer EventSetInformation RegOpenKeyExW RegGetValueW RegQueryValueExW

ntdll

NtCreateNamedPipeFile RtlNtStatusToDosError NtWriteFile RtlGetVersion NtOpenFile

kernel32

SetWaitableTimer ReleaseSRWLockExclusive GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetEnvironmentVariableW GetFinalPathNameByHandleW ReleaseMutex CreateMutexA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo GetTempPathW FindNextFileW ExitProcess FindClose FindFirstFileExW GetCommandLineW GetModuleHandleW GetCurrentDirectoryW SetThreadStackGuarantee AddVectoredExceptionHandler CreateDirectoryW GetStdHandle GetEnvironmentStringsW LoadLibraryA CreateProcessW lstrlenW GetCurrentThreadId GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess ReadFileEx GetCurrentProcessId OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcessHeap HeapFree LoadLibraryExW AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW FreeLibrary CreateThread GetSystemTimeAsFileTime QueryPerformanceCounter LoadLibraryW LCIDToLocaleName QueryPerformanceFrequency GetCurrentThread HeapReAlloc SetFileTime SetFileInformationByHandle MoveFileExW GetFullPathNameW SetLastError SleepEx WriteFileEx FreeEnvironmentStringsW WaitForSingleObject CompareStringOrdinal GetEnvironmentVariableW GetModuleHandleA Sleep GetProcAddress CloseHandle CreateFileW InitializeSListHead GetConsoleMode SetUnhandledExceptionFilter GetUserDefaultUILanguage GetFileInformationByHandle GetFileAttributesW LoadLibraryExA HeapAlloc CreateWaitableTimerExW FormatMessageW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

user32

DestroyMenu TrackPopupMenu PostQuitMessage SetMenu RemoveMenu AppendMenuW InsertMenuW CheckMenuItem SetMenuItemInfoW CreateAcceleratorTableW DestroyAcceleratorTable DestroyWindow DrawMenuBar TranslateAcceleratorW CreatePopupMenu CreateMenu DrawIconEx DrawTextW GetWindowDC OffsetRect GetMenuBarInfo GetMenuItemInfoW CreateIcon AdjustWindowRectEx CreateWindowExW GetKeyboardLayout IsWindow ToUnicodeEx MapVirtualKeyExW GetKeyState GetAsyncKeyState GetKeyboardState GetRawInputData SystemParametersInfoA SetPropW GetSystemMetrics RegisterTouchWindow SendInput SetForegroundWindow GetMenu IsWindowVisible SetWindowTextW GetWindowTextW GetWindowTextLengthW SetWindowDisplayAffinity GetMessageW EnumDisplayMonitors MonitorFromPoint ClipCursor GetClipCursor ShowCursor SetWindowLongW EnableMenuItem TranslateMessage GetSystemMenu DestroyIcon ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx DispatchMessageW RegisterRawInputDevices PostMessageW FlashWindowEx RegisterWindowMessageA MapVirtualKeyW PostThreadMessageW GetWindow SetParent RedrawWindow MapWindowPoints SetFocus DefWindowProcW ShowWindow VkKeyScanW ChangeDisplaySettingsExW PeekMessageW ReleaseDC GetDC IsProcessDPIAware EnableWindow IsWindowEnabled GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn GetWindowPlacement SetWindowPos GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos SetWindowPlacement CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW FillRect GetMonitorInfoW MonitorFromRect MonitorFromWindow GetCursorPos ClientToScreen GetClientRect GetWindowLongW ScreenToClient GetUpdateRect ValidateRect IsIconic SendMessageW AdjustWindowRect EnumChildWindows DispatchMessageA GetMessageA RegisterClassExW InvalidateRgn SetCursor LoadCursorW

gdi32

BitBlt CombineRgn CreateCompatibleDC SetTextColor DeleteObject GetDeviceCaps CreateSolidBrush SetBkMode CreateRectRgn CreateDIBSection SelectObject DeleteDC

dwmapi

DwmGetWindowAttribute DwmEnableBlurBehindWindow DwmSetWindowAttribute

ole32

CoCreateFreeThreadedMarshaler OleInitialize RegisterDragDrop RevokeDragDrop CoInitializeEx CoCreateInstance CoTaskMemFree CoTaskMemAlloc CoUninitialize

comctl32

DefSubclassProc SetWindowSubclass TaskDialogIndirect RemoveWindowSubclass

shlwapi

SHCreateMemStream

shell32

ShellExecuteW SHGetKnownFolderPath SHAppBarMessage DragFinish DragQueryFileW

oleaut32

SetErrorInfo SysStringLen GetErrorInfo SysFreeString

vcruntime140

__current_exception wcsrchr _purecall _CxxThrowException __C_specific_handler memmove memcmp memcpy __CxxFrameHandler3 __std_exception_destroy __std_exception_copy __current_exception_context memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-math-l1-1-0

roundf __setusermatherr trunc round pow floor

api-ms-win-crt-string-l1-1-0

wcslen wcscmp _wcsicmp

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi

api-ms-win-crt-runtime-l1-1-0

_initterm_e _exit _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __p___argc _set_app_type _seh_filter_exe __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _register_onexit_function terminate _crt_atexit exit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_callnewh free _set_new_mode malloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_19e0e3d3b616ad15cb0679e9c60315e2_akira_cobalt-strike_rusty-stealer_satacom

bcryptprimitives

advapi32

ntdll

kernel32

api-ms-win-core-synch-l1-2-0

user32

gdi32

dwmapi

ole32

comctl32

shlwapi

shell32

oleaut32

vcruntime140

vcruntime140_1

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic