2026-08-03_aec6232155a51b6d0d4d2316cb0de6ae_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_aec6232155a51b6d0d4d2316cb0de6ae_akira_cobalt-strike_rusty-stealer_satacom
Size 8.4MB
Sample260803-ffdsjscb87
SHA256 304f1e07e2ae215c879ab68e8b7407142c2c0ef112c5f93f73fb4e5b9f8f9db6
MD5 aec6232155a51b6d0d4d2316cb0de6ae
SHA1 6fa674d13d99da07ebf2e556e4f03280d15bf9e4
SHA512 d90a6dd8da39308a21abe0ab956ece4bab1a161e3e7e80d1d7ac5970a7e628df4316767883b2e723c15f65ce6f5017efa57237239ca303e865282ef26583e0bd
SSDEEP 98304:jWwhZo+ylyfwQWcJ3lr+hkFSPQ8+8V80/j7xqpUP:awhZo+ylyfwQWcJ3lr+h4mlzwOP
TLSH
T15796E5257B5F996CD09BC474824B8A66492030DB0B39A9FF4484963C2F7EBF56F38319
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_aec6232155a51b6d0d4d2316cb0de6ae_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-03_aec6232155a51b6d0d4d2316cb0de6ae_akira_cobalt-strike_rusty-stealer_satacom

.exe 8.4MB

2026-08-03_aec6232155a51b6d0d4d2316cb0de6ae_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH e2001b4ef71b8bb6ebd4dc34001ab060
SHA256 304f1e07e2ae215c879ab68e8b7407142c2c0ef112c5f93f73fb4e5b9f8f9db6
MD5 aec6232155a51b6d0d4d2316cb0de6ae
SHA1 6fa674d13d99da07ebf2e556e4f03280d15bf9e4
SHA512 d90a6dd8da39308a21abe0ab956ece4bab1a161e3e7e80d1d7ac5970a7e628df4316767883b2e723c15f65ce6f5017efa57237239ca303e865282ef26583e0bd
SSDEEP 98304:jWwhZo+ylyfwQWcJ3lr+hkFSPQ8+8V80/j7xqpUP:awhZo+ylyfwQWcJ3lr+h4mlzwOP
TLSH
T15796E5257B5F996CD09BC474824B8A66492030DB0B39A9FF4484963C2F7EBF56F38319
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8773632

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcryptprimitives

ProcessPrng

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey EventUnregister EventWriteTransfer EventRegister EventSetInformation RegGetValueW

ntdll

NtCreateNamedPipeFile NtWriteFile RtlNtStatusToDosError NtOpenFile RtlGetVersion

kernel32

FlsGetValue FlsSetValue FlsAlloc RaiseException RtlPcToFileHeader LCIDToLocaleName FlsFree GetUserDefaultUILanguage EncodePointer FindNextFileW GetTempPathW InitializeSListHead CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetUnhandledExceptionFilter SetEnvironmentVariableW GetSystemTimeAsFileTime SleepConditionVariableSRW WakeAllConditionVariable GetFinalPathNameByHandleW ReleaseMutex CreateMutexA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess FindClose FindFirstFileExW GetCommandLineW GetCurrentDirectoryW AcquireSRWLockExclusive SetThreadStackGuarantee AddVectoredExceptionHandler ReleaseSRWLockExclusive GetStdHandle GetEnvironmentStringsW CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess LoadLibraryW LoadLibraryA OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcessHeap HeapFree LoadLibraryExW RtlUnwindEx FreeLibrary ReadFileEx GetCurrentProcessId lstrlenW SetHandleInformation GetModuleHandleW CreateThread QueryPerformanceCounter QueryPerformanceFrequency HeapReAlloc SetFileTime SetFileInformationByHandle GetFullPathNameW SetLastError SleepEx WriteFileEx WaitForSingleObject FreeEnvironmentStringsW CompareStringOrdinal GetEnvironmentVariableW GetModuleHandleA Sleep GetProcAddress CloseHandle CreateFileW GetCurrentThread InitializeCriticalSectionEx GetCurrentThreadId DeleteCriticalSection LoadLibraryExA GetConsoleMode HeapAlloc GetFileInformationByHandle GetFileAttributesW FormatMessageW CreateDirectoryW SetWaitableTimer

user32

GetWindowDC VkKeyScanW GetMenuBarInfo DestroyMenu TrackPopupMenu PostQuitMessage OffsetRect DrawTextW SetMenu DestroyWindow RemoveMenu AppendMenuW InsertMenuW CheckMenuItem SetMenuItemInfoW CreateAcceleratorTableW DestroyAcceleratorTable DrawMenuBar CreatePopupMenu TranslateAcceleratorW AdjustWindowRect CreateMenu RedrawWindow DrawIconEx GetMenuItemInfoW CreateIcon GetKeyboardLayout ToUnicodeEx MapVirtualKeyExW GetKeyState GetAsyncKeyState GetKeyboardState SendMessageW IsIconic SetWindowLongW EnableMenuItem GetSystemMenu SendInput SetForegroundWindow GetMenu ShowCursor ClipCursor GetClipCursor IsWindowVisible SetWindowTextW ValidateRect GetWindowTextLengthW PostThreadMessageW EnumDisplayMonitors PeekMessageW MonitorFromPoint SetWindowDisplayAffinity GetRawInputData SystemParametersInfoA SetPropW DestroyIcon ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx GetUpdateRect TranslateMessage DispatchMessageW RegisterRawInputDevices PostMessageW LoadCursorW ScreenToClient RegisterWindowMessageA GetWindow GetWindowLongW GetClientRect ClientToScreen SetParent GetWindowTextW SetFocus ShowWindow GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn EnableWindow IsWindowEnabled GetCursorPos ReleaseDC GetDC IsProcessDPIAware MonitorFromWindow MonitorFromRect EnumChildWindows DispatchMessageA GetMessageA RegisterClassExW GetMonitorInfoW GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW MapWindowPoints DefWindowProcW MapVirtualKeyW FlashWindowEx GetMessageW GetSystemMetrics FillRect RegisterTouchWindow IsWindow CreateWindowExW AdjustWindowRectEx GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos InvalidateRgn SetWindowPos SystemParametersInfoW SetCursor CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

comctl32

SetWindowSubclass RemoveWindowSubclass DefSubclassProc TaskDialogIndirect

ole32

CoCreateFreeThreadedMarshaler CoCreateInstance OleInitialize RegisterDragDrop CoInitializeEx CoTaskMemFree CoTaskMemAlloc CoUninitialize RevokeDragDrop

gdi32

SetTextColor SetBkMode DeleteObject DeleteDC GetDeviceCaps CreateDIBSection CreateRectRgn SelectObject CombineRgn CreateSolidBrush BitBlt CreateCompatibleDC

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow DwmGetWindowAttribute

shlwapi

SHCreateMemStream

shell32

ShellExecuteW SHGetKnownFolderPath DragQueryFileW DragFinish SHAppBarMessage

oleaut32

SysStringLen SysFreeString GetErrorInfo SetErrorInfo

ws2_32

send WSAGetLastError freeaddrinfo connect WSACleanup WSAStartup WSASocketW getaddrinfo closesocket

api-ms-win-crt-math-l1-1-0

roundf trunc round __setusermatherr pow floor

api-ms-win-crt-string-l1-1-0

wcscmp wcslen strcpy_s _wcsicmp

api-ms-win-crt-convert-l1-1-0

_ultow_s _wtoi wcstol

api-ms-win-crt-runtime-l1-1-0

_set_app_type _initterm_e _c_exit _seh_filter_exe _cexit _initterm _exit _register_thread_local_exe_atexit_callback _get_initial_narrow_environment abort __p___argv exit __p___argc terminate _crt_atexit _configure_narrow_argv _register_onexit_function _initialize_onexit_table _initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

calloc free malloc _set_new_mode _callnewh

Name

.text

Size

5.8MB

Virtual Size

5.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

335KB

Virtual Size

335KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rcd7cb

Size

144KB

Virtual Size

192KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_aec6232155a51b6d0d4d2316cb0de6ae_akira_cobalt-strike_rusty-stealer_satacom

bcryptprimitives

advapi32

ntdll

kernel32

user32

api-ms-win-core-synch-l1-2-0

comctl32

ole32

gdi32

dwmapi

shlwapi

shell32

oleaut32

ws2_32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic