Extracted

• • Target
    2026-07-22_1a6a79f46a8efe64ba0adbd5e934d0ac_akira_rusty-stealer
  • Size 236KB
  • SHA256 8b856cd63ffb4597cde6f2264aef2eab9a0840d59d63a83f7759ca0e51d81531
  • MD5 1a6a79f46a8efe64ba0adbd5e934d0ac
  • SHA1 e8eac6137bcbb2ad9dbfec358aae5ce53484eb84
  • SHA512 5cbe09e3259b2de9b07fd2beee3ba5e987c90f8e48071b309e03bf3bbbb5b8437317e0f5ac72892f95402c7d2fd6fa255fe66ce16a5bcc31b8c6696d00f86bd5
  • SSDEEP 6144:+BXlJRw0UhRtLiAamZ7z9ey04mu0SFRvjbEhVjX+:+BXlJRaJH924lwi
  • TLSH
    T14A344B117A5A98F8E946C478820AC5737935B8C60B22F8FF01D855393E6BAF57F38B14
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2