2026-08-02_0a92e04ae28e6a26b9391bdf71464985_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_0a92e04ae28e6a26b9391bdf71464985_akira_cobalt-strike_rusty-stealer_satacom
Size 15.8MB
Sample260802-k551jszdkf
SHA256 bcfd090f2306d4ae7c75b6754a58d3a91491aa9f2240dcb8b2543accc70eb5eb
MD5 0a92e04ae28e6a26b9391bdf71464985
SHA1 c65d9befa99c4a188ecb7e6322e5af0d9d7d9b37
SHA512 f40403eeebdc6ac8e24f22b2a096569f01193eb4d80eee7f6d4fa1a25316400cebf2579e757f37bf607c9a3c702b19e182bdf9d99854bf085f69b963cd9133be
SSDEEP 98304:fkxcr9q16Y/QjkALg6T4C0ZdwL8pEryglA:vq1X/Qjk/w
TLSH
T153F6B343F6B2D1A8D16AC0B5831AB233EF717C4D44257ABB8BD45B313E61F50A62DB24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_0a92e04ae28e6a26b9391bdf71464985_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-02_0a92e04ae28e6a26b9391bdf71464985_akira_cobalt-strike_rusty-stealer_satacom

.exe 15.8MB

2026-08-02_0a92e04ae28e6a26b9391bdf71464985_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 3871029be445ec32362644325d0575f6
SHA256 bcfd090f2306d4ae7c75b6754a58d3a91491aa9f2240dcb8b2543accc70eb5eb
MD5 0a92e04ae28e6a26b9391bdf71464985
SHA1 c65d9befa99c4a188ecb7e6322e5af0d9d7d9b37
SHA512 f40403eeebdc6ac8e24f22b2a096569f01193eb4d80eee7f6d4fa1a25316400cebf2579e757f37bf607c9a3c702b19e182bdf9d99854bf085f69b963cd9133be
SSDEEP 98304:fkxcr9q16Y/QjkALg6T4C0ZdwL8pEryglA:vq1X/Qjk/w
TLSH
T153F6B343F6B2D1A8D16AC0B5831AB233EF717C4D44257ABB8BD45B313E61F50A62DB24
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16202960

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

moc.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

kernel32

GetModuleFileNameW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter DuplicateHandle HeapFree GetProcessHeap GetCommandLineW HeapReAlloc CloseHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetStdHandle GetConsoleMode GetFileInformationByHandleEx WaitForMultipleObjects GetOverlappedResult GetLastError WaitForSingleObject GetExitCodeProcess SetFilePointerEx GetSystemInfo SwitchToThread CreateThread GetCurrentThreadId SetLastError GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress GetCurrentProcess lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex RtlVirtualUnwind WideCharToMultiByte GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW ReadFileEx SleepEx WriteFileEx GetModuleHandleW FormatMessageW GetModuleHandleA GetFullPathNameW CreateFileW SetFileTime SetFileInformationByHandle GetFileInformationByHandle ReadConsoleW ExitProcess CreateEventW CancelIo ReadFile CompareStringOrdinal GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW

ntdll

NtCreateNamedPipeFile NtWriteFile RtlNtStatusToDosError NtReadFile NtOpenFile

vcruntime140

memcpy __current_exception __C_specific_handler memset memmove memcmp __current_exception_context __CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

sin fmod atan2 acos asin log tan atan tanh log1p exp cos __setusermatherr trunc

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe _configure_narrow_argv terminate _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_0a92e04ae28e6a26b9391bdf71464985_akira_cobalt-strike_rusty-stealer_satacom

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic