2026-08-03_b88a6f4455404d1ce43e9e359c16ba05_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_b88a6f4455404d1ce43e9e359c16ba05_akira_rusty-stealer
Size 1.2MB
Sample260803-fenw5ayemd
SHA256 5cafaedaba7a83ee80cd08696ff6bacbc42debfbe9a3888d316571a0ec405689
MD5 b88a6f4455404d1ce43e9e359c16ba05
SHA1 ad54fa1970ecc219692f2c8f2560f1dc4a35bc26
SHA512 8849435aa3d6088ecf831fa6c1332fc7c90b7b87d3dac3dbf84fb8e4cdf25578a4e42de1db8ba9b6b79c42e44ea9450da0f736828fa355f0aee1dfb08dab2b9f
SSDEEP 24576:SBHBsrQEyeZ48fTkPMOWnZUeHfbLxchV77:SVBs/7ZU0DLxk77
TLSH
T1AD452A217B4655ACC4AAC47083568A631A3170CB1B35B9FF44C9A2783F6AEF51F3D728
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_b88a6f4455404d1ce43e9e359c16ba05_akira_rusty-stealer

File Explorer

2026-08-03_b88a6f4455404d1ce43e9e359c16ba05_akira_rusty-stealer

.exe 1.2MB

2026-08-03_b88a6f4455404d1ce43e9e359c16ba05_akira_rusty-stealer

IMPHASH 3d194646ce43ab868001075c760190b3
SHA256 5cafaedaba7a83ee80cd08696ff6bacbc42debfbe9a3888d316571a0ec405689
MD5 b88a6f4455404d1ce43e9e359c16ba05
SHA1 ad54fa1970ecc219692f2c8f2560f1dc4a35bc26
SHA512 8849435aa3d6088ecf831fa6c1332fc7c90b7b87d3dac3dbf84fb8e4cdf25578a4e42de1db8ba9b6b79c42e44ea9450da0f736828fa355f0aee1dfb08dab2b9f
SSDEEP 24576:SBHBsrQEyeZ48fTkPMOWnZUeHfbLxchV77:SVBs/7ZU0DLxk77
TLSH
T1AD452A217B4655ACC4AAC47083568A631A3170CB1B35B9FF44C9A2783F6AEF51F3D728
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

870048

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

quota_transport_contract-987614f956b9255e.pdb

kernel32

GetLastError CreateEventW HeapFree SetFileInformationByHandle GetFileInformationByHandleEx CloseHandle IsProcessorFeaturePresent GetConsoleScreenBufferInfo SetConsoleTextAttribute FormatMessageW GetProcAddress GetStdHandle HeapAlloc GetProcessHeap GetFinalPathNameByHandleW UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetTempPathW GetModuleHandleA WaitForMultipleObjects GetModuleHandleW GetFileType GetFileAttributesW GetConsoleOutputCP GetConsoleMode WriteConsoleW MultiByteToWideChar GetModuleFileNameW SetUnhandledExceptionFilter ReleaseMutex CreateMutexA LoadLibraryA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess FindClose FindFirstFileExW CopyFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW CompareStringOrdinal WaitForSingleObject FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId CreateFileW SetFileTime HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess TerminateProcess GetEnvironmentStringsW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

bcryptprimitives

ProcessPrng

ntdll

NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError NtWriteFile NtOpenFile

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception_context memcpy __CxxFrameHandler3 memset __current_exception memmove _CxxThrowException __C_specific_handler memcmp

api-ms-win-crt-math-l1-1-0

fmod __setusermatherr floor

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _set_app_type _seh_filter_exe _initterm _initterm_e exit _crt_atexit _register_onexit_function _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_b88a6f4455404d1ce43e9e359c16ba05_akira_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic