2026-07-23_72dc7f4d04a107c41d5e2d7e2ae65de0_akira_cobalt-strike_icedid_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_72dc7f4d04a107c41d5e2d7e2ae65de0_akira_cobalt-strike_icedid_rusty-stealer_satacom
Size 598KB
Sample260723-q4256abc65
SHA256 969c72343ee8854275f2bd5f5e280a848c85bb29530a2349e22edbd0f3c0441d
MD5 72dc7f4d04a107c41d5e2d7e2ae65de0
SHA1 9dadb0345fe84d3573d7eb8c1437b6c557b951cc
SHA512 d202f6b24be576da6ff7154d28ac101e026f596feadd504d733a103b9d69fe33c8888ed37296630d46e9db89b581f656def472bc254d21dcbd4238f9890c7bd9
SSDEEP 6144:mPq4WDzcVi+YAOFnvTZMY3nm80Ky8u8ZoAwnTP5CdVJ3u8jqBnAK2YfFPabR/R3o:9zMVB7srZMY280AwGeGP+FPal/O
TLSH
T18DD4824556218588D127B4FE02312B9BFFA1BC0247068B8F3FB5DA426F1E1B4DA677E1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_72dc7f4d04a107c41d5e2d7e2ae65de0_akira_cobalt-strike_icedid_rusty-stealer_satacom

File Explorer

2026-07-23_72dc7f4d04a107c41d5e2d7e2ae65de0_akira_cobalt-strike_icedid_rusty-stealer_satacom

.exe 598KB

2026-07-23_72dc7f4d04a107c41d5e2d7e2ae65de0_akira_cobalt-strike_icedid_rusty-stealer_satacom

IMPHASH cc358b64a66efa593f9d0ff2eaed7052
SHA256 969c72343ee8854275f2bd5f5e280a848c85bb29530a2349e22edbd0f3c0441d
MD5 72dc7f4d04a107c41d5e2d7e2ae65de0
SHA1 9dadb0345fe84d3573d7eb8c1437b6c557b951cc
SHA512 d202f6b24be576da6ff7154d28ac101e026f596feadd504d733a103b9d69fe33c8888ed37296630d46e9db89b581f656def472bc254d21dcbd4238f9890c7bd9
SSDEEP 6144:mPq4WDzcVi+YAOFnvTZMY3nm80Ky8u8ZoAwnTP5CdVJ3u8jqBnAK2YfFPabR/R3o:9zMVB7srZMY280AwGeGP+FPal/O
TLSH
T18DD4824556218588D127B4FE02312B9BFFA1BC0247068B8F3FB5DA426F1E1B4DA677E1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

309952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

loader.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

advapi32

RegSetValueExW RegCreateKeyExW RegCloseKey OpenProcessToken GetTokenInformation RegQueryValueExW RegOpenKeyExW

kernel32

InitializeSListHead SetFilePointerEx CreateFileW GetFileSize LoadLibraryW GetProcAddress CloseHandle GetModuleHandleW VirtualProtect GetModuleFileNameW GetCurrentProcess LoadLibraryA AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetCurrentThreadId GetLastError SetLastError GetEnvironmentVariableW GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP WaitForSingleObject MultiByteToWideChar WriteConsoleW HeapAlloc GetModuleHandleA FlushFileBuffers HeapSize LCMapStringW CompareStringW QueryPerformanceCounter GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetStartupInfoW RtlUnwindEx FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlPcToFileHeader WriteFile ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetCommandLineA GetCommandLineW IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW LoadLibraryExW

ole32

CoUninitialize CoInitializeEx CoCreateInstance

ntdll

NtWriteFile RtlNtStatusToDosError

Name

.text

Size

357KB

Virtual Size

357KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

223KB

Virtual Size

223KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_72dc7f4d04a107c41d5e2d7e2ae65de0_akira_cobalt-strike_icedid_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

advapi32

kernel32

ole32

ntdll

generic