2026-07-28_a257d64e3d11043b7dc55d21d94e5ce1_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-28_a257d64e3d11043b7dc55d21d94e5ce1_akira_cobalt-strike_rusty-stealer_satacom
Size 10.4MB
Sample260728-e7jbnsar91
SHA256 b5ad6613e77d95d81b144ed36e0a9a5aa026baa3ef88d21ea1ba91f04b28aa88
MD5 a257d64e3d11043b7dc55d21d94e5ce1
SHA1 11ff06a6bbe156e821ac7ec241af78f12898a7d6
SHA512 d929abded7c1748a24811bb8251b6190158014e0c5c8da19d2cf292fbe8036f278b458ca73630e97b0091eed0bc1f64992025b799704f675c969122a49828197
SSDEEP 98304:Cj+nYWWQJs2+MPztffaWEjEScKnJ9Un2P+TxICj4yuMIC+exv:VnZsatfvHAZyuhCxx
TLSH
T18BB64A11BA9A68ACC15AC474834A46735A3134CB1B35BAFF44D492793F6AEF45F3C328
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-28_a257d64e3d11043b7dc55d21d94e5ce1_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-28_a257d64e3d11043b7dc55d21d94e5ce1_akira_cobalt-strike_rusty-stealer_satacom

.exe 10.4MB

2026-07-28_a257d64e3d11043b7dc55d21d94e5ce1_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH cf49dcc3a1ccbfafd84cac1a91f0f75d
SHA256 b5ad6613e77d95d81b144ed36e0a9a5aa026baa3ef88d21ea1ba91f04b28aa88
MD5 a257d64e3d11043b7dc55d21d94e5ce1
SHA1 11ff06a6bbe156e821ac7ec241af78f12898a7d6
SHA512 d929abded7c1748a24811bb8251b6190158014e0c5c8da19d2cf292fbe8036f278b458ca73630e97b0091eed0bc1f64992025b799704f675c969122a49828197
SSDEEP 98304:Cj+nYWWQJs2+MPztffaWEjEScKnJ9Un2P+TxICj4yuMIC+exv:VnZsatfvHAZyuhCxx
TLSH
T18BB64A11BA9A68ACC15AC474834A46735A3134CB1B35BAFF44D492793F6AEF45F3C328
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7357808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

fensu.pdb

kernel32

AreFileApisANSI InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId SetFileAttributesW MoveFileExW GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathW CreateMutexW WaitForSingleObject QueryPerformanceFrequency QueryPerformanceCounter FormatMessageA WideCharToMultiByte GetModuleHandleW SystemTimeToFileTime LoadLibraryW LoadLibraryA OutputDebugStringW FormatMessageW MultiByteToWideChar OutputDebugStringA RaiseException CompareStringOrdinal GetFileAttributesW FreeEnvironmentStringsW WriteFile WriteFileEx SleepEx ReadFile HeapValidate SetFileInformationByHandle HeapSize GetDiskFreeSpaceW GetTempPathA GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW CreateFileA CreateThread CreateEventW WaitForSingleObjectEx DeleteFileA DeleteFileW HeapReAlloc HeapAlloc HeapCompact HeapDestroy SetUnhandledExceptionFilter ReadFileEx GetOverlappedResult RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnlockFile GetSystemTimePreciseAsFileTime LockFileEx CancelIo GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW LockFile HeapCreate GetEnvironmentStringsW GetFileSize GetCurrentProcessId GetStdHandle GetProcessHeap CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW FreeLibrary lstrlenW GetSystemTimeAsFileTime RemoveDirectoryW FindFirstFileExW FindClose CreateHardLinkW SwitchToThread CreateMutexA ReleaseMutex GetSystemTime GetModuleFileNameW SetCurrentDirectoryW WriteConsoleW GetConsoleOutputCP GetFileType GetTickCount FlushFileBuffers WaitForMultipleObjects FlushViewOfFile FindNextFileW DuplicateHandle MapViewOfFile CreateFileMappingW VirtualProtect UnmapViewOfFile GetSystemInfo GetConsoleMode LocalFree GetCurrentProcess GetCurrentThread DeviceIoControl GetFullPathNameW GetFinalPathNameByHandleW SetFileTime InitializeSListHead SetLastError CreateFileW GetFileInformationByHandle GetExitCodeProcess HeapFree CreateProcessW SetFilePointer Sleep GetLastError GetProcAddress GetModuleHandleA CloseHandle

bcryptprimitives

ProcessPrng

ntdll

RtlNtStatusToDosError NtCreateNamedPipeFile NtReadFile NtCreateFile NtWriteFile NtOpenFile

advapi32

EqualSid GetNamedSecurityInfoW OpenThreadToken IsWellKnownSid CheckTokenMembership GetTokenInformation OpenProcessToken

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

userenv

GetUserProfileDirectoryW

vcruntime140

__CxxFrameHandler3 _CxxThrowException __current_exception_context memchr memcpy memcmp memmove memset strchr strrchr __C_specific_handler __current_exception

api-ms-win-crt-string-l1-1-0

strcspn strcmp strspn strncmp strlen

api-ms-win-crt-math-l1-1-0

log __setusermatherr

api-ms-win-crt-heap-l1-1-0

_set_new_mode realloc free malloc _msize

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_set_app_type _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _endthreadex __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe _beginthreadex _configure_narrow_argv _initialize_onexit_table _register_onexit_function _crt_atexit terminate

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-28_a257d64e3d11043b7dc55d21d94e5ce1_akira_cobalt-strike_rusty-stealer_satacom

kernel32

bcryptprimitives

ntdll

advapi32

api-ms-win-core-synch-l1-2-0

userenv

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic