2026-07-22_adb8f261b55059897cc1017beb84d5ec_akira_icedid_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-22_adb8f261b55059897cc1017beb84d5ec_akira_icedid_rusty-stealer
Size 1.3MB
Sample260722-3ethyade22
SHA256 dac8f341d38d7b36a3146f1bd653fbfaa1129f9b3951db8dafff5f328854f55c
MD5 adb8f261b55059897cc1017beb84d5ec
SHA1 7b91778039349ad96625b761eb6a77ac9f8e1f72
SHA512 123108a313a1b8a004d7932240b226c95bf7e3b2c3b9a87af1d6a11c7e34f725d80248ef74066733ebe7dbc672d33d8b5db68139ae491568bbbe65daf2c61af8
SSDEEP 24576:Tay1Tc4MCJRMiep+GaGByGr+eMhgjVFM3VIH06iyvL:WOTcsJRMieftVMhg7YIU6i
TLSH
T111557D03E69581F9C0A9C4B4C3579A33EA72B88A0B34B5FF5BE057112E26F905B3DB15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_adb8f261b55059897cc1017beb84d5ec_akira_icedid_rusty-stealer

File Explorer

2026-07-22_adb8f261b55059897cc1017beb84d5ec_akira_icedid_rusty-stealer

.exe 1.3MB

2026-07-22_adb8f261b55059897cc1017beb84d5ec_akira_icedid_rusty-stealer

IMPHASH 2fa17cabdb73fa6cdd6c84ba01805217
SHA256 dac8f341d38d7b36a3146f1bd653fbfaa1129f9b3951db8dafff5f328854f55c
MD5 adb8f261b55059897cc1017beb84d5ec
SHA1 7b91778039349ad96625b761eb6a77ac9f8e1f72
SHA512 123108a313a1b8a004d7932240b226c95bf7e3b2c3b9a87af1d6a11c7e34f725d80248ef74066733ebe7dbc672d33d8b5db68139ae491568bbbe65daf2c61af8
SSDEEP 24576:Tay1Tc4MCJRMiep+GaGByGr+eMhgjVFM3VIH06iyvL:WOTcsJRMieftVMhg7YIU6i
TLSH
T111557D03E69581F9C0A9C4B4C3579A33EA72B88A0B34B5FF5BE057112E26F905B3DB15
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

814800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

agent.pdb

shell32

ShellExecuteW

kernel32

GetVolumeInformationW GetDiskFreeSpaceExW MoveFileExW GetFileInformationByHandleEx CreateDirectoryW SetFileInformationByHandle SwitchToThread CreateMutexW GetLocalTime FindNextFileW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetSystemTimePreciseAsFileTime GetCurrentThreadId SetLastError GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW ReadFileEx QueryPerformanceFrequency GetModuleHandleW GetDriveTypeW QueryPerformanceCounter SetHandleInformation CreateThread GetModuleHandleA GetFullPathNameW CreateFileW SetFileTime GetFileInformationByHandle CompareStringOrdinal GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetModuleFileNameW DuplicateHandle GetTempPathW DeleteFileW CreateWaitableTimerExW SetWaitableTimer Sleep SetFilePointerEx InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection GetLogicalDrives GetCurrentProcessId GetCurrentProcess GetExitCodeProcess WaitForSingleObject WriteFileEx SleepEx GetProcessTimes Process32NextW Process32FirstW CreateToolhelp32Snapshot GlobalMemoryStatusEx TerminateProcess OpenProcess GetSystemTimes EnterCriticalSection FlushFileBuffers HeapSize LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree GetSystemInfo GetLastError FindFirstFileExW FindClose CloseHandle FormatMessageW FlsSetValue FlsGetValue FlsAlloc GetStringTypeW GetFileType SetStdHandle SetEnvironmentVariableW GetCPInfo GetOEMCP GetACP IsValidCodePage GetCommandLineW GetCommandLineA GetModuleHandleExW ExitProcess WriteFile RtlPcToFileHeader LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent RtlUnwindEx EncodePointer RaiseException TlsAlloc

psapi

GetProcessMemoryInfo

advapi32

RegEnumKeyExW RegSetValueExW RegCloseKey OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW SystemFunction036 GetTokenInformation RegQueryValueExW RegCreateKeyExW RegDeleteTreeW RegDeleteValueW

user32

SendInput ExitWindowsEx GetKeyState GetAsyncKeyState CallNextHookEx UnhookWindowsHookEx PeekMessageW SetWindowsHookExW GetWindowTextW GetForegroundWindow ReleaseDC GetSystemMetrics GetDC

gdi32

CreateCompatibleBitmap SelectObject BitBlt GetDIBits DeleteObject DeleteDC CreateCompatibleDC

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

ntdll

NtWriteFile NtReadFile NtCreateNamedPipeFile NtOpenFile RtlNtStatusToDosError

ws2_32

WSAGetLastError freeaddrinfo connect closesocket send WSASend getaddrinfo setsockopt WSAStartup WSACleanup WSASocketW recv

Name

.text

Size

862KB

Virtual Size

861KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

383KB

Virtual Size

383KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

1008B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_adb8f261b55059897cc1017beb84d5ec_akira_icedid_rusty-stealer

shell32

kernel32

psapi

advapi32

user32

gdi32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

bcrypt

ntdll

ws2_32

generic