2026-07-31_5c944866b725549ff03f688131a6d09c_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-31_5c944866b725549ff03f688131a6d09c_akira_cobalt-strike_rusty-stealer_satacom
Size 20.8MB
Sample260801-bxap1acm2t
SHA256 9661ab852d82180baad8d2ba0a0d63535dd2f031ea926ea8ef352910a87362bd
MD5 5c944866b725549ff03f688131a6d09c
SHA1 6d697da50b5146d3a959b3b6094ae4d2248483b0
SHA512 7673365221b81fc0c3705fd43b1cc613dae2ee987331582556b2ab1000600775fd51dacf85e72589c91aede2d1d715c549f1c8e0d54e242cbfd727c856b8f40f
SSDEEP 98304:YfBSBCwcEWzX/cOXPQ6GCaAZUeq5+O+ek89yzJOR10swC/GM/sXo9R417SH3uCX:nCwcbXPcK8KA9D
TLSH
T1E02749267A5B95ACD456C8B083464A276E2038CF0B35BDEF44E991383F79BF42F28715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_5c944866b725549ff03f688131a6d09c_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-07-31_5c944866b725549ff03f688131a6d09c_akira_cobalt-strike_rusty-stealer_satacom

.exe 20.8MB

2026-07-31_5c944866b725549ff03f688131a6d09c_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH ed5b219e6edaf3d9e9c0b4b8134a53de
SHA256 9661ab852d82180baad8d2ba0a0d63535dd2f031ea926ea8ef352910a87362bd
MD5 5c944866b725549ff03f688131a6d09c
SHA1 6d697da50b5146d3a959b3b6094ae4d2248483b0
SHA512 7673365221b81fc0c3705fd43b1cc613dae2ee987331582556b2ab1000600775fd51dacf85e72589c91aede2d1d715c549f1c8e0d54e242cbfd727c856b8f40f
SSDEEP 98304:YfBSBCwcEWzX/cOXPQ6GCaAZUeq5+O+ek89yzJOR10swC/GM/sXo9R417SH3uCX:nCwcbXPcK8KA9D
TLSH
T1E02749267A5B95ACD456C8B083464A276E2038CF0B35BDEF44E991383F79BF42F28715
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15135680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bpsr_app.pdb

user32

ReleaseCapture SetCapture TrackMouseEvent ToUnicodeEx VkKeyScanW GetKeyboardLayout RegisterRawInputDevices MapVirtualKeyExW SetPropW MsgWaitForMultipleObjectsEx SetWindowDisplayAffinity DestroyCursor MapVirtualKeyW ClipCursor GetClipCursor AdjustWindowRectEx GetWindowLongW SetWindowLongW EnableMenuItem GetKeyboardState GetSystemMenu GetKeyState GetAsyncKeyState MonitorFromRect ScreenToClient GetTouchInputInfo CloseTouchInputHandle GetMenu GetRawInputData GetActiveWindow RegisterTouchWindow SetWindowLongPtrW EmptyClipboard CloseClipboard ShowCursor GetPropW RegisterWindowMessageA SetTimer KillTimer SetClipboardData RegisterClipboardFormatW RegisterClassW OpenClipboard SendInput DestroyMenu DrawTextW FillRect GetWindowDC OffsetRect MapWindowPoints GetMenuBarInfo GetMenuItemInfoW SystemParametersInfoA IsProcessDPIAware TrackPopupMenu GetCursorPos PostQuitMessage CheckMenuItem SetMenu RemoveMenu CreateAcceleratorTableW DestroyAcceleratorTable DrawIconEx AppendMenuW InsertMenuW SetMenuItemInfoW CreatePopupMenu CreateMenu CreateIcon MessageBoxW EnumDisplaySettingsExW ValidateRect SetWindowTextW GetWindowRect DrawMenuBar SendMessageW RedrawWindow DispatchMessageW TranslateMessage GetSystemMetrics MonitorFromWindow InvalidateRgn SetWindowPos SetWindowPlacement PeekMessageW ChangeDisplaySettingsExW ReleaseDC SetCursor LoadCursorW GetSysColor DestroyWindow CreateWindowExW RegisterClassExW GetClassInfoExW GetClassNameW GetWindowPlacement GetDC GetMonitorInfoW EnumDisplayMonitors MonitorFromPoint IsWindowVisible GetWindowLongPtrW ShowWindow DestroyIcon LoadImageW GetClientRect GetClipboardData SetForegroundWindow GetForegroundWindow PostMessageW IsIconic RemovePropW ClientToScreen DefWindowProcW CallWindowProcW

kernel32

GetCurrentDirectoryW SetThreadStackGuarantee AddVectoredExceptionHandler CreateDirectoryW GetExitCodeProcess WaitForMultipleObjects GetStdHandle CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW LocaleNameToLCID FreeEnvironmentStringsW GetEnvironmentStringsW GetFileInformationByHandleEx GetFileInformationByHandle SetFileInformationByHandle MultiByteToWideChar SetFileTime CreateFileW GetOverlappedResult WideCharToMultiByte GetProcAddress LoadLibraryW LoadLibraryExW CreateEventW ReadFile QueryPerformanceCounter LoadLibraryA CompareStringOrdinal GetModuleFileNameW lstrlenW GetFinalPathNameByHandleW GetModuleHandleA GetUserPreferredUILanguages QueryPerformanceFrequency LoadLibraryExA GetFullPathNameW WriteFileEx SleepEx ReadFileEx WaitForSingleObject GetCurrentProcess MapViewOfFile CreateFileMappingW VirtualProtect FindClose WriteConsoleW GetEnvironmentVariableW ReleaseMutex FindFirstFileExW GetConsoleMode GetConsoleOutputCP CreateWaitableTimerExW GetProcessHeap HeapFree HeapAlloc FormatMessageW SetWaitableTimer GlobalFree SetThreadErrorMode RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo FindNextFileW WaitForSingleObjectEx GetTimeZoneInformationForYear GetCurrentProcessId GetModuleHandleW CloseHandle CreateMutexA SetLastError HeapReAlloc UnmapViewOfFile GetCurrentThread DuplicateHandle GetSystemInfo FreeLibrary GlobalLock Sleep GlobalSize GlobalAlloc GlobalUnlock CreateThread SwitchToThread GetCurrentThreadId CreateMutexW GetSystemTimePreciseAsFileTime TlsAlloc GetSystemTimeAsFileTime GetLastError InitializeSListHead SetUnhandledExceptionFilter GetFileAttributesW

gdi32

SelectObject DeleteDC SetBkMode CreateDIBSection CreateCompatibleDC SetTextColor GetDeviceCaps BitBlt CreateSolidBrush SetPixelFormat ChoosePixelFormat DescribePixelFormat SwapBuffers DeleteObject CreateRectRgn

shell32

ShellExecuteW Shell_NotifyIconGetRect DragQueryFileW DragFinish Shell_NotifyIconW

comctl32

RemoveWindowSubclass DefSubclassProc SetWindowSubclass

ntdll

NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError NtOpenFile NtWriteFile

shlwapi

AssocQueryStringW

oleaut32

SysFreeString SetErrorInfo SysAllocStringLen SysStringLen SafeArrayPutElement SafeArrayCreateVector GetErrorInfo VariantClear

uiautomationcore

UiaHostProviderFromHwnd UiaGetReservedNotSupportedValue UiaLookupId UiaRaiseAutomationPropertyChangedEvent UiaRaiseAutomationEvent UiaReturnRawElementProvider UiaGetReservedMixedAttributeValue

ole32

CoUninitialize RevokeDragDrop CoCreateFreeThreadedMarshaler CoInitializeEx CoCreateInstance OleInitialize RegisterDragDrop

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

dwrite

DWriteCreateFactory

dwmapi

DwmGetColorizationColor DwmSetWindowAttribute DwmEnableBlurBehindWindow

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

bcryptprimitives

ProcessPrng

advapi32

DeleteService QueryServiceStatus OpenServiceW OpenSCManagerW ImpersonateAnonymousToken RevertToSelf CloseServiceHandle

opengl32

wglGetProcAddress wglCreateContext wglMakeCurrent wglDeleteContext wglGetCurrentContext wglShareLists

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmAssociateContextEx ImmGetContext ImmReleaseContext ImmGetCompositionStringW

uxtheme

SetWindowTheme

windivert

WinDivertOpen WinDivertRecv WinDivertClose

vcruntime140

_CxxThrowException __current_exception_context __current_exception __C_specific_handler __CxxFrameHandler3 memset memcmp memmove memcpy

api-ms-win-crt-string-l1-1-0

strlen wcslen

api-ms-win-crt-math-l1-1-0

sinf ceilf __setusermatherr atan2f sin floor roundf round trunc cosf acos pow cbrtf powf exp2f ceil tanf acosf fmodf expf truncf _hypotf cos fmod floorf

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe terminate _set_app_type _crt_atexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _cexit _initterm_e exit _exit __p___argc _register_onexit_function _initialize_onexit_table _c_exit _register_thread_local_exe_atexit_callback __p___argv strerror

api-ms-win-crt-heap-l1-1-0

free malloc _set_new_mode

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_5c944866b725549ff03f688131a6d09c_akira_cobalt-strike_rusty-stealer_satacom

user32

kernel32

gdi32

shell32

comctl32

ntdll

shlwapi

oleaut32

uiautomationcore

ole32

api-ms-win-core-winrt-error-l1-1-0

dwrite

dwmapi

api-ms-win-core-synch-l1-2-0

bcryptprimitives

advapi32

opengl32

imm32

uxtheme

windivert

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic