2026-07-30_545e4a1f55dc0a73d030ee21cca8abcd_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_545e4a1f55dc0a73d030ee21cca8abcd_akira_rusty-stealer
Size 1.2MB
Sample260730-gb89bs1bqa
SHA256 c6e45621282a7fbea6ba635425e089e7bb3ee99980a0962bab7c44a0d7fba706
MD5 545e4a1f55dc0a73d030ee21cca8abcd
SHA1 94bcc3deaa1eac6abf7fc7f9477413b40f59d420
SHA512 500c2d0380b233ced084f843f5ee41f776e8ff6e55e829c28b141d5955a0f12b6c4546d05ff01ee7fc6bb5773e045d50e8984f50b71dca7d741387f3eafe9359
SSDEEP 24576:VELuJbCOOwJ64kxnR90jr04HcNVRjZUSM:uqc4kxnR90jrujVU
TLSH
T14355F8166668A5EDC1BBC0B8C2838F62792130C90B356FF745D193792E26EF96E3C354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_545e4a1f55dc0a73d030ee21cca8abcd_akira_rusty-stealer

File Explorer

2026-07-30_545e4a1f55dc0a73d030ee21cca8abcd_akira_rusty-stealer

.exe 1.2MB

2026-07-30_545e4a1f55dc0a73d030ee21cca8abcd_akira_rusty-stealer

IMPHASH 5042d96ec650976662a802981de16c56
SHA256 c6e45621282a7fbea6ba635425e089e7bb3ee99980a0962bab7c44a0d7fba706
MD5 545e4a1f55dc0a73d030ee21cca8abcd
SHA1 94bcc3deaa1eac6abf7fc7f9477413b40f59d420
SHA512 500c2d0380b233ced084f843f5ee41f776e8ff6e55e829c28b141d5955a0f12b6c4546d05ff01ee7fc6bb5773e045d50e8984f50b71dca7d741387f3eafe9359
SSDEEP 24576:VELuJbCOOwJ64kxnR90jr04HcNVRjZUSM:uqc4kxnR90jrujVU
TLSH
T14355F8166668A5EDC1BBC0B8C2838F62792130C90B356FF745D193792E26EF96E3C354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

923368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-400f7cf988cf7b2c.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

kernel32

InitializeSListHead PeekNamedPipe CloseHandle CreateEventA WaitForMultipleObjects WaitForSingleObject OpenSemaphoreA ReleaseSemaphore SetEvent GetProcAddress LoadLibraryA GetNativeSystemInfo GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess WideCharToMultiByte WaitForSingleObjectEx GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx GetLastError SetFileInformationByHandle FlushFileBuffers SetFileTime DuplicateHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW CopyFileExW CreateDirectoryW GetFileInformationByHandleEx SwitchToThread IsDebuggerPresent CreateEventW GetOverlappedResult GetFileInformationByHandle DeleteFileW FindFirstFileExW FindClose CreateHardLinkW GetConsoleMode GetModuleHandleW FormatMessageW GetFullPathNameW GetModuleHandleA GetTempPathW GetModuleFileNameW ExitProcess QueryPerformanceFrequency ReadFile CancelIo HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep CreateThread ReadFileEx SleepEx GetFileAttributesW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW WriteFileEx QueryPerformanceCounter GetCurrentThreadId GetSystemInfo GetExitCodeProcess IsProcessorFeaturePresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind FindNextFileW GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter CreateFileW TerminateProcess

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW RegEnumKeyExW

ole32

CoCreateInstance CoInitializeEx

oleaut32

SysStringLen SysFreeString

ntdll

NtWriteFile NtOpenFile NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError

vcruntime140

__current_exception_context __CxxFrameHandler3 __C_specific_handler memcmp memmove memset __current_exception _CxxThrowException memcpy

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _get_initial_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _initialize_narrow_environment _initialize_onexit_table _register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_545e4a1f55dc0a73d030ee21cca8abcd_akira_rusty-stealer

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic