2026-08-01_b0d2e0427f18ab0905ea0008e04d997d_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_b0d2e0427f18ab0905ea0008e04d997d_akira_rusty-stealer
Size 131KB
Sample260801-c9pkcsce33
SHA256 2f04d544b4d0976d18c498faeb504f41a71d4dd03cefe02a471e02e5d2396863
MD5 b0d2e0427f18ab0905ea0008e04d997d
SHA1 acc8442990817ecac9dc323f1fca686ff3d1564d
SHA512 9d9335e0e67e0acdd9351efc30b0e663d70f2d198683f8ad12551eb5f602a6af0692ee6fdce419e110aa7a88d427212fbec49f57b01541bbe7dbcbfdd2f748d9
SSDEEP 1536:q+SY/eDsjqUI0YFnHo6QcmMmrTyztxl9I9qVToWmFSVv6YR8Wc4kQ7c:q+zWIj80oIamM5zt9ZoWmFSVHR+4q
TLSH
T198D36C177981A0FCD44AC034C26585A6B772B0D51F226BFF13A942382F6ADF66F3C664
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_b0d2e0427f18ab0905ea0008e04d997d_akira_rusty-stealer

File Explorer

2026-08-01_b0d2e0427f18ab0905ea0008e04d997d_akira_rusty-stealer

.exe 131KB

2026-08-01_b0d2e0427f18ab0905ea0008e04d997d_akira_rusty-stealer

IMPHASH 6093c37f9ac6ff3abb7fe4c3da2f724c
SHA256 2f04d544b4d0976d18c498faeb504f41a71d4dd03cefe02a471e02e5d2396863
MD5 b0d2e0427f18ab0905ea0008e04d997d
SHA1 acc8442990817ecac9dc323f1fca686ff3d1564d
SHA512 9d9335e0e67e0acdd9351efc30b0e663d70f2d198683f8ad12551eb5f602a6af0692ee6fdce419e110aa7a88d427212fbec49f57b01541bbe7dbcbfdd2f748d9
SSDEEP 1536:q+SY/eDsjqUI0YFnHo6QcmMmrTyztxl9I9qVToWmFSVv6YR8Wc4kQ7c:q+zWIj80oIamM5zt9ZoWmFSVHR+4q
TLSH
T198D36C177981A0FCD44AC034C26585A6B772B0D51F226BFF13A942382F6ADF66F3C664
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

88096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-b83b00ac15319d6a.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetLastError WaitForSingleObject CloseHandle SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW IsProcessorFeaturePresent GetModuleHandleA GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memset __current_exception_context memcpy _CxxThrowException __C_specific_handler __current_exception memmove memcmp __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _seh_filter_exe _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_b0d2e0427f18ab0905ea0008e04d997d_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic