2026-07-30_32268aa7729cf909ff1fd006db0de4eb_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_32268aa7729cf909ff1fd006db0de4eb_akira_cobalt-strike_rusty-stealer_satacom
Size 4.1MB
Sample260730-eac4dscm3z
SHA256 66cb2c5c790a7f5c4aec48a8f33b837ee6310b462d45550ad77e2d67d9f69f5d
MD5 32268aa7729cf909ff1fd006db0de4eb
SHA1 fe085a6aa2e6fa64e7500807b7099cc0b68cb856
SHA512 5772e0bdfa9f2686f8e0c212b6d2031e12d4b4ce9128a92963584016722a5cff266bff609c7b54bd353de53a8077de3c644a6fdb4241a19931b178027a6e827a
SSDEEP 49152:g+hze6f5SbJl11Q5jyyOB2l4J9xJJOkPdC0nNehvsjAFgHJTWaHIgpc7V5GhqIZ:vqFOg672
TLSH
T1B3161A16B67954EAD17AC07893839F32AA20348D07397BF759D0827A2F24EF86D3D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_32268aa7729cf909ff1fd006db0de4eb_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-30_32268aa7729cf909ff1fd006db0de4eb_akira_cobalt-strike_rusty-stealer_satacom

.exe 4.1MB

2026-07-30_32268aa7729cf909ff1fd006db0de4eb_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 7866e68105b40647e202591d8fb21a8a
SHA256 66cb2c5c790a7f5c4aec48a8f33b837ee6310b462d45550ad77e2d67d9f69f5d
MD5 32268aa7729cf909ff1fd006db0de4eb
SHA1 fe085a6aa2e6fa64e7500807b7099cc0b68cb856
SHA512 5772e0bdfa9f2686f8e0c212b6d2031e12d4b4ce9128a92963584016722a5cff266bff609c7b54bd353de53a8077de3c644a6fdb4241a19931b178027a6e827a
SSDEEP 49152:g+hze6f5SbJl11Q5jyyOB2l4J9xJJOkPdC0nNehvsjAFgHJTWaHIgpc7V5GhqIZ:vqFOg672
TLSH
T1B3161A16B67954EAD17AC07893839F32AA20348D07397BF759D0827A2F24EF86D3D354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2675072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

mw_api-07da38fe01027aeb.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime CloseHandle GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetEnvironmentStringsW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW FindFirstFileExW FindClose ExitProcess GetSystemInfo SwitchToThread GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetFileType GetModuleHandleW FormatMessageW WaitForMultipleObjects GetModuleHandleA

ntdll

NtWriteFile NtOpenFile NtReadFile RtlNtStatusToDosError NtCreateNamedPipeFile

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception_context _CxxThrowException memcmp memmove memset __C_specific_handler __current_exception __CxxFrameHandler3 memcpy

api-ms-win-crt-math-l1-1-0

fmod floor log cos exp sin tan acos asin atan ceil pow trunc log10 round __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_set_app_type _crt_atexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe terminate _register_onexit_function _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_32268aa7729cf909ff1fd006db0de4eb_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic