2026-08-03_f651d77d171448c8acc5b387955d820f_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_f651d77d171448c8acc5b387955d820f_akira_rusty-stealer
Size 3.6MB
Sample260803-fa747sydng
SHA256 60d419db783a8d465888754265c684c969b6cb3f26f686a51178b9ac9fef2953
MD5 f651d77d171448c8acc5b387955d820f
SHA1 58a297c484d22dc10cfeff1cc37c904404aca46b
SHA512 d4bebcef60f32357d4ec721cbff210cc859f20bca4a5bbc197ae37c4446269c27e4a7c5ddbabcd42452cb63b5709841d74bf74ef39f75bf6a50dca61e76d1932
SSDEEP 49152:TeUobHmujRp5Bh3tmJsbx0SnbE81Hn17svgHZ6e6kHE7UaU9c:CbSJSK729c
TLSH
T115065B167A9950ADC06BC07583564613EA3130CB2B25BAFB74DC82792F6BEF51B3D324
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_f651d77d171448c8acc5b387955d820f_akira_rusty-stealer

File Explorer

2026-08-03_f651d77d171448c8acc5b387955d820f_akira_rusty-stealer

.exe 3.6MB

2026-08-03_f651d77d171448c8acc5b387955d820f_akira_rusty-stealer

IMPHASH 35c2fe69926ff03bc4f9c1a6cf9ecee0
SHA256 60d419db783a8d465888754265c684c969b6cb3f26f686a51178b9ac9fef2953
MD5 f651d77d171448c8acc5b387955d820f
SHA1 58a297c484d22dc10cfeff1cc37c904404aca46b
SHA512 d4bebcef60f32357d4ec721cbff210cc859f20bca4a5bbc197ae37c4446269c27e4a7c5ddbabcd42452cb63b5709841d74bf74ef39f75bf6a50dca61e76d1932
SSDEEP 49152:TeUobHmujRp5Bh3tmJsbx0SnbE81Hn17svgHZ6e6kHE7UaU9c:CbSJSK729c
TLSH
T115065B167A9950ADC06BC07583564613EA3130CB2B25BAFB74DC82792F6BEF51B3D324
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2700628

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

provider_quota_runtime_contract-20a8ffeefbcdd539.pdb

kernel32

DeleteFileW LoadLibraryW UnlockFile GetProcAddress LocalFree GetFileSize GetCurrentProcessId GetModuleHandleW FreeLibrary WideCharToMultiByte FlushFileBuffers GetConsoleMode GetFileInformationByHandle CreateFileW WaitForSingleObjectEx GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle GetFileAttributesExW GetFileAttributesA GetLastError DeleteFileA Sleep SystemTimeToFileTime MultiByteToWideChar GetFileAttributesW WaitForSingleObject CreateMutexW GetTempPathW SetEndOfFile GetFullPathNameA SetFilePointer LockFile GetDiskFreeSpaceW GetFullPathNameW AreFileApisANSI GetCurrentThreadId LoadLibraryA GetDriveTypeW GetFileInformationByHandleEx SetFileInformationByHandle CreateEventW GetDiskFreeSpaceA CreateFileA GetProcessHeap HeapAlloc HeapFree IsProcessorFeaturePresent FormatMessageW CloseHandle GetTempPathA GetSystemTimePreciseAsFileTime InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleHandleA WaitForMultipleObjects GetFileType GetConsoleOutputCP WriteConsoleW GetModuleFileNameW GetFinalPathNameByHandleW ReleaseMutex CreateMutexA SwitchToThread ExitProcess FindClose FindFirstFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetEnvironmentStringsW TerminateProcess GetExitCodeProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess GetOverlappedResult ReadFileEx CreateThread QueryPerformanceFrequency SetFileTime SetLastError SleepEx WriteFileEx FreeEnvironmentStringsW CompareStringOrdinal DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection RaiseException ReadFile HeapCreate WriteFile OutputDebugStringA UnlockFileEx UnmapViewOfFile HeapValidate HeapSize OutputDebugStringW FlushViewOfFile HeapReAlloc GetNativeSystemInfo GetSystemInfo HeapCompact HeapDestroy LockFileEx GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter GetTickCount CancelIo

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

ntdll

NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError NtWriteFile NtOpenFile

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception _CxxThrowException memcmp memchr __CxxFrameHandler3 memcpy __C_specific_handler memset memmove strchr __current_exception_context strrchr

api-ms-win-crt-math-l1-1-0

fmod log __setusermatherr floor

api-ms-win-crt-string-l1-1-0

strcmp strcspn strncmp strspn strlen

api-ms-win-crt-heap-l1-1-0

malloc free _msize realloc _set_new_mode

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function terminate _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _set_app_type _endthreadex _configure_narrow_argv _exit _initialize_narrow_environment _get_initial_narrow_environment _initterm exit _seh_filter_exe _initterm_e _crt_atexit _beginthreadex

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_f651d77d171448c8acc5b387955d820f_akira_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic