2026-08-03_284ef9de5e2fcd11ac679d25c4736e7c_akira_cobalt-strike_icedid_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_284ef9de5e2fcd11ac679d25c4736e7c_akira_cobalt-strike_icedid_rusty-stealer
Size 233KB
Sample260803-ddkf7sbc22
SHA256 c5d4cf01e1bc737f886a422fd00cb7d7b9d35dc39b1df5210498ce5bd5211b6c
MD5 284ef9de5e2fcd11ac679d25c4736e7c
SHA1 4e25c29ff0a473ccb6415cc5084b0655d7579b5f
SHA512 7b447ee914b665da417586fb693fcd72faaa61a1c1614f98c354adbef5ebc267524cdc7cb570b68441719d27ecf322e3fa4208b5ca9f48a1910c4e286789ea55
SSDEEP 3072:Y5WW5/5AXrlPn+EL96xabdJjRFebu6DQimd8o9pfKVpS0EVwSm9PD/M/Q8S/buLI:u95YrlPn+CdJsDD7o9oVpKVwBDsX
TLSH
T139347E1676955DFCED1BC07D86024A61A7737C860B21DAFF039442355F2BAE2AE3EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_284ef9de5e2fcd11ac679d25c4736e7c_akira_cobalt-strike_icedid_rusty-stealer

File Explorer

2026-08-03_284ef9de5e2fcd11ac679d25c4736e7c_akira_cobalt-strike_icedid_rusty-stealer

.exe 233KB

2026-08-03_284ef9de5e2fcd11ac679d25c4736e7c_akira_cobalt-strike_icedid_rusty-stealer

IMPHASH efc6bd791f4566d180ae5223af61fe3e
SHA256 c5d4cf01e1bc737f886a422fd00cb7d7b9d35dc39b1df5210498ce5bd5211b6c
MD5 284ef9de5e2fcd11ac679d25c4736e7c
SHA1 4e25c29ff0a473ccb6415cc5084b0655d7579b5f
SHA512 7b447ee914b665da417586fb693fcd72faaa61a1c1614f98c354adbef5ebc267524cdc7cb570b68441719d27ecf322e3fa4208b5ca9f48a1910c4e286789ea55
SSDEEP 3072:Y5WW5/5AXrlPn+EL96xabdJjRFebu6DQimd8o9pfKVpS0EVwSm9PD/M/Q8S/buLI:u95YrlPn+CdJsDD7o9oVpKVwBDsX
TLSH
T139347E1676955DFCED1BC07D86024A61A7737C860B21DAFF039442355F2BAE2AE3EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

95196

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

google.pdb

kernel32

MultiByteToWideChar GetConsoleOutputCP GetConsoleMode GetStdHandle ExitProcess WideCharToMultiByte GetLastError GetCurrentThreadId GetStartupInfoW IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary TerminateProcess IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle GetStringTypeW HeapAlloc CompareStringW LCMapStringW HeapSize EncodePointer ReleaseMutex lstrlenW GetCurrentProcess WaitForSingleObjectEx CreateMutexA GetCurrentProcessId WriteConsoleW GetProcAddress HeapReAlloc HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee EnumSystemLocalesEx VirtualProtect VirtualAlloc SetLastError Sleep WaitForSingleObject SetWaitableTimer CreateWaitableTimerExW CloseHandle CreateMutexW FreeConsole FormatMessageW GetEnvironmentStringsW FindNextFileW FindFirstFileExW FindClose GetCommandLineW GetCommandLineA GetModuleHandleExW GetModuleFileNameW WriteFile RtlPcToFileHeader LoadLibraryExW InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException RtlUnwindEx SetUnhandledExceptionFilter UnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter SetEnvironmentVariableW GetModuleHandleW GetModuleHandleA GetEnvironmentVariableW RtlVirtualUnwind LoadLibraryA RtlLookupFunctionEntry RtlCaptureContext GetCurrentDirectoryW SetFilePointerEx AddVectoredExceptionHandler GetFileInformationByHandleEx GetFileInformationByHandle CreateFileW FlushFileBuffers GetFileType IsDebuggerPresent GetFullPathNameW FreeEnvironmentStringsW

d3d9

Direct3DCreate9

ntdll

RtlNtStatusToDosError NtWriteFile NtReadFile

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

oleaut32

GetErrorInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_284ef9de5e2fcd11ac679d25c4736e7c_akira_cobalt-strike_icedid_rusty-stealer

kernel32

d3d9

ntdll

api-ms-win-core-synch-l1-2-0

oleaut32

generic