2026-07-31_235ffcd485e82a2c76de119fccd6f857_akira_cobalt-strike_icedid_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-31_235ffcd485e82a2c76de119fccd6f857_akira_cobalt-strike_icedid_rusty-stealer_satacom
Size 5.4MB
Sample260731-lpcvhazzcs
SHA256 bbdbe913260acac93e06710db49104d5d9b2547974bc45419d5ce72d3a55213b
MD5 235ffcd485e82a2c76de119fccd6f857
SHA1 3c4b7f7085a0acf6c34021a988463f1cb92c054b
SHA512 89d972688980e6f279a8adaafc175f688f767d1164226f646a83ae3777547fe15241250c1d53a5241f776afb049622b4b2bbc4f1e2fc5fdd1597d88d2471d149
SSDEEP 49152:dhkf+M4x5v3H/BobHSMe1LaNt7q5Ol+/nGvwKc1iQZWltGbdx0/LF7NwSuwg3zPC:TDvvubHVo2wK/FseC9qDQhsWxU
TLSH
T152461911BE9BA8ECD559C870834A4A739F2174CB1B26BDFF41D482353E69AB01B3D718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_235ffcd485e82a2c76de119fccd6f857_akira_cobalt-strike_icedid_rusty-stealer_satacom

File Explorer

2026-07-31_235ffcd485e82a2c76de119fccd6f857_akira_cobalt-strike_icedid_rusty-stealer_satacom

.exe 5.4MB

2026-07-31_235ffcd485e82a2c76de119fccd6f857_akira_cobalt-strike_icedid_rusty-stealer_satacom

IMPHASH a0350f0864df97cc9747808c6a7efc2a
SHA256 bbdbe913260acac93e06710db49104d5d9b2547974bc45419d5ce72d3a55213b
MD5 235ffcd485e82a2c76de119fccd6f857
SHA1 3c4b7f7085a0acf6c34021a988463f1cb92c054b
SHA512 89d972688980e6f279a8adaafc175f688f767d1164226f646a83ae3777547fe15241250c1d53a5241f776afb049622b4b2bbc4f1e2fc5fdd1597d88d2471d149
SSDEEP 49152:dhkf+M4x5v3H/BobHSMe1LaNt7q5Ol+/nGvwKc1iQZWltGbdx0/LF7NwSuwg3zPC:TDvvubHVo2wK/FseC9qDQhsWxU
TLSH
T152461911BE9BA8ECD559C870834A4A739F2174CB1B26BDFF41D482353E69AB01B3D718
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4003248

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

just.pdb

kernel32

FindNextFileW GetFileType GetLastError ExitProcess CreateDirectoryW ReadConsoleW GetFileInformationByHandleEx GetFileInformationByHandle FindFirstFileExW SetFileTime GetFullPathNameW WriteConsoleW MultiByteToWideChar GetConsoleOutputCP WideCharToMultiByte ReleaseMutex CreateMutexA WaitForSingleObjectEx GetCurrentThreadId SwitchToThread SleepEx CreateFileW RemoveDirectoryW SetFileInformationByHandle DeleteFileW GetCurrentProcessId GetFinalPathNameByHandleW lstrlenW GetTempPathW GetConsoleMode DuplicateHandle GetCurrentProcess GetFileAttributesW GetExitCodeProcess WaitForSingleObject GetProcessId GetBinaryTypeW ReleaseSemaphore SetConsoleMode CreateProcessW CreateSemaphoreA GetTimeZoneInformationForYear SetConsoleCtrlHandler CloseHandle GetStartupInfoW FlsAlloc FlsGetValue FlsSetValue FlsFree TerminateProcess FreeLibrary IsProcessorFeaturePresent IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle GetStringTypeW CompareStringW LCMapStringW FlushFileBuffers SetFilePointerEx SetLastError FindClose CompareStringOrdinal CreateEventW GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle GetCurrentThread SetThreadStackGuarantee CreateThread WaitForMultipleObjects GetSystemInfo HeapSize LoadLibraryExW UnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetModuleHandleExW WriteFile DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer RaiseException RtlPcToFileHeader RtlUnwindEx SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCommandLineW GetModuleFileNameW GetWindowsDirectoryW GetSystemDirectoryW FreeEnvironmentStringsW GetEnvironmentStringsW ReadFile CancelIo GetModuleHandleA FormatMessageW GetModuleHandleW ReadFileEx GetEnvironmentVariableW HeapAlloc GetCurrentDirectoryW RtlVirtualUnwind GetProcAddress LoadLibraryA RtlLookupFunctionEntry RtlCaptureContext QueryPerformanceCounter QueryPerformanceFrequency WriteFileEx VirtualProtect UnmapViewOfFile MapViewOfFile CreateFileMappingW GetOverlappedResult LockFileEx GetSystemTimePreciseAsFileTime AddVectoredExceptionHandler HeapReAlloc SetEnvironmentVariableW HeapFree GetProcessHeap

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

userenv

GetUserProfileDirectoryW

shell32

SHGetKnownFolderPath

combase

CoTaskMemFree

ntdll

NtReadFile NtOpenFile NtCreateNamedPipeFile RtlNtStatusToDosError NtWriteFile

Name

.text

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

116KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_235ffcd485e82a2c76de119fccd6f857_akira_cobalt-strike_icedid_rusty-stealer_satacom

kernel32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

userenv

shell32

combase

ntdll

generic