2026-07-22_336e50dfa140f038d61dc559d299258b_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-22_336e50dfa140f038d61dc559d299258b_akira_cobalt-strike_rusty-stealer_satacom
Size 4.2MB
Sample260722-wl2dss1dkh
SHA256 1bd88936a7fecb5ec91c9563439d4db71c79dc6410737a9a3bf9295afbeae4c0
MD5 336e50dfa140f038d61dc559d299258b
SHA1 918ae1a945febb0d2c6b3d58e136e671857b261e
SHA512 4d342b0f2b35484bd86b7259efe706170d05038af7eebaa579d95ff623dbae4ed6974ee8d7845d59752818c790c83550ac565bd60fe37d7cdbc7111b58967506
SSDEEP 49152:gtMFPYOQnCa6ZCHtuiELlt/rWFZ5yQVcWK/yrgG7Gml5FToOib9YXWzVmSs9EanC:FFChv3YqFnLgbYoVDshhO
TLSH
T1C5161912ABA655ECC89AC4B0D3A647626A3134CB0B35B9FF45C485347E7DAF12E3C718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_336e50dfa140f038d61dc559d299258b_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-22_336e50dfa140f038d61dc559d299258b_akira_cobalt-strike_rusty-stealer_satacom

.exe 4.2MB

2026-07-22_336e50dfa140f038d61dc559d299258b_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 4cdeac49499d4b1cd17f59ed58335d1c
SHA256 1bd88936a7fecb5ec91c9563439d4db71c79dc6410737a9a3bf9295afbeae4c0
MD5 336e50dfa140f038d61dc559d299258b
SHA1 918ae1a945febb0d2c6b3d58e136e671857b261e
SHA512 4d342b0f2b35484bd86b7259efe706170d05038af7eebaa579d95ff623dbae4ed6974ee8d7845d59752818c790c83550ac565bd60fe37d7cdbc7111b58967506
SSDEEP 49152:gtMFPYOQnCa6ZCHtuiELlt/rWFZ5yQVcWK/yrgG7Gml5FToOib9YXWzVmSs9EanC:FFChv3YqFnLgbYoVDshhO
TLSH
T1C5161912ABA655ECC89AC4B0D3A647626A3134CB0B35B9FF45C485347E7DAF12E3C718
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3057840

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dcc_mcp_ui_control_host.pdb

kernel32

GetModuleHandleExW GetModuleHandleW GetModuleFileNameW ResetEvent lstrlenW CreateEventW CloseHandle CreateFileMappingW MapViewOfFile LoadLibraryExA GetProcessHeap HeapAlloc HeapFree UnmapViewOfFile WaitForSingleObject QueryFullProcessImageNameW CreateFileW FormatMessageW SetEvent DuplicateHandle WriteFileEx SleepEx ReadFileEx GetCurrentThreadId ProcessIdToSessionId GetProcAddress GetModuleHandleA ReleaseMutex Sleep GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess OpenProcess GetNamedPipeClientProcessId GetNamedPipeClientSessionId ConnectNamedPipe CreateNamedPipeW GetLastError CreateMutexW GetCurrentProcessId DisconnectNamedPipe FlushFileBuffers LocalFree SetUnhandledExceptionFilter GetCommandLineW GetEnvironmentVariableW GetTempPathW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler CreateDirectoryW GetStdHandle TerminateProcess GetExitCodeProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetEnvironmentStringsW GetFileInformationByHandleEx GetFileInformationByHandle GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext CreateThread QueryPerformanceCounter QueryPerformanceFrequency HeapReAlloc SetFileTime SetFileInformationByHandle GetFullPathNameW SetLastError FreeEnvironmentStringsW CompareStringOrdinal GetFileAttributesW SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP FindFirstFileExW FindClose ExitProcess GetSystemInfo SwitchToThread WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA DeleteFileW MultiByteToWideChar WriteConsoleW GetConsoleMode

advapi32

GetTokenInformation OpenProcessToken ConvertSidToStringSidW GetSidSubAuthorityCount GetSidSubAuthority ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

user32

IsWindow IsWindowVisible GetUserObjectInformationW BeginPaint FillRect DrawTextW IsIconic GetWindowRect SetThreadDpiAwarenessContext EnumDisplayMonitors GetDpiForWindow GetMonitorInfoW MonitorFromRect MonitorFromPoint EndPaint GetWindowThreadProcessId GetThreadDesktop RemovePropW GetClassInfoW RegisterClassW SetPropW SetWindowRgn ShowWindow GetWindowDC MessageBoxW DestroyWindow GetCursorPos SetWindowPos SendInput PrintWindow GetForegroundWindow PeekMessageW TranslateMessage DispatchMessageW GetPropW GetSystemMetrics WindowFromPoint GetAncestor AttachThreadInput BringWindowToTop SetForegroundWindow GetWindowLongPtrW GetClassNameW RegisterHotKey UnregisterHotKey SetLayeredWindowAttributes GetClientRect DefWindowProcW EnumWindows ReleaseDC GetWindow PostMessageW SetWindowDisplayAffinity CreateWindowExW GetWindowTextW GetWindowTextLengthW

shell32

SHGetKnownFolderPath

combase

CoTaskMemFree

ntdll

NtCreateNamedPipeFile NtOpenFile NtWriteFile RtlNtStatusToDosError NtReadFile

bcryptprimitives

ProcessPrng

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

wtsapi32

WTSRegisterSessionNotification WTSQuerySessionInformationW WTSFreeMemory WTSUnRegisterSessionNotification

gdi32

CombineRgn CreateCompatibleDC CreateCompatibleBitmap CreateEllipticRgn BitBlt GetDIBits DeleteDC CreateRoundRectRgn SetTextColor SetBkMode SelectObject CreateFontW DeleteObject CreateSolidBrush

oleaut32

SysStringLen SysFreeString GetErrorInfo

vcruntime140

__C_specific_handler _CxxThrowException __current_exception memset __CxxFrameHandler3 memcpy memcmp __current_exception_context memmove

api-ms-win-crt-math-l1-1-0

floor roundf cosf round pow fmaf log2f __setusermatherr expf sinf ceilf floorf truncf ceil fma log2 exp powf

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _set_app_type _configure_narrow_argv _register_onexit_function _initialize_onexit_table _initialize_narrow_environment terminate _get_initial_narrow_environment _initterm _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _initterm_e _exit exit _seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_336e50dfa140f038d61dc559d299258b_akira_cobalt-strike_rusty-stealer_satacom

kernel32

advapi32

api-ms-win-core-synch-l1-2-0

user32

shell32

combase

ntdll

bcryptprimitives

api-ms-win-shcore-scaling-l1-1-1

wtsapi32

gdi32

oleaut32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic