2026-08-03_a986834e9d1c5cdc702200b623100450_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_a986834e9d1c5cdc702200b623100450_akira_rusty-stealer
Size 5.1MB
Sample260803-hh76aade36
SHA256 ebb30d9ff7559e86d63a35b650284748129dc8e26b27793f2f03e0928f9e4b3a
MD5 a986834e9d1c5cdc702200b623100450
SHA1 65418d873f127f5f2930f166c439faaf4574f017
SHA512 0168c8f6011520efcb1b4b9a58030364876768286f4b0d70239bf39f8ae501d4685a0b1334335e1d6ff90064d9c77b6c3be1bff1eb55197ce4c7472481766964
SSDEEP 49152:Ws+YUsefTRORWlZHyvm85g70lJY/TBDQmYWlIOcKS+QFYa7gO3U4kgm97yG7dtP4:WtOwFB2tmP7d
TLSH
T1DF363A167B9950ACC0ABC075834646629A3130DB1B25BAFF74DC92782F6AEF51F3D324
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_a986834e9d1c5cdc702200b623100450_akira_rusty-stealer

File Explorer

2026-08-03_a986834e9d1c5cdc702200b623100450_akira_rusty-stealer

.exe 5.1MB

2026-08-03_a986834e9d1c5cdc702200b623100450_akira_rusty-stealer

IMPHASH d70a3aaa59428558ed6a6f33787d0394
SHA256 ebb30d9ff7559e86d63a35b650284748129dc8e26b27793f2f03e0928f9e4b3a
MD5 a986834e9d1c5cdc702200b623100450
SHA1 65418d873f127f5f2930f166c439faaf4574f017
SHA512 0168c8f6011520efcb1b4b9a58030364876768286f4b0d70239bf39f8ae501d4685a0b1334335e1d6ff90064d9c77b6c3be1bff1eb55197ce4c7472481766964
SSDEEP 49152:Ws+YUsefTRORWlZHyvm85g70lJY/TBDQmYWlIOcKS+QFYa7gO3U4kgm97yG7dtP4:WtOwFB2tmP7d
TLSH
T1DF363A167B9950ACC0ABC075834646629A3130DB1B25BAFF74DC92782F6AEF51F3D324
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3727176

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

publication_contract-681c33e34ebe477c.pdb

kernel32

DeleteFileW LoadLibraryW UnlockFile GetProcAddress LocalFree GetFileSize GetCurrentProcessId GetModuleHandleW FreeLibrary WideCharToMultiByte FlushFileBuffers GetConsoleMode GetFileInformationByHandle ReleaseSemaphore CreateFileW WaitForSingleObjectEx CreateSemaphoreW GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle GetFileAttributesExW GetFileAttributesA GetLastError DeleteFileA Sleep SystemTimeToFileTime MultiByteToWideChar GetFileAttributesW WaitForSingleObject CreateMutexW GetTempPathW SetEndOfFile GetFullPathNameA SetFilePointer LockFile GetDiskFreeSpaceW GetFullPathNameW AreFileApisANSI GetCurrentThreadId LoadLibraryA GetDriveTypeW GetFileInformationByHandleEx SetFileInformationByHandle CreateEventW GetDiskFreeSpaceA CreateFileA GetProcessHeap HeapAlloc HeapFree IsProcessorFeaturePresent FormatMessageW CloseHandle GetTempPathA GetSystemTimePreciseAsFileTime InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter FindNextFileW GetModuleHandleA WaitForMultipleObjects GetFileType SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW GetModuleFileNameW GetFinalPathNameByHandleW ReleaseMutex CreateMutexA SwitchToThread ExitProcess FindClose FindFirstFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetEnvironmentStringsW TerminateProcess GetExitCodeProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess GetOverlappedResult ReadFileEx CreateThread QueryPerformanceFrequency SetFileTime SetLastError SleepEx WriteFileEx FreeEnvironmentStringsW CompareStringOrdinal DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection RaiseException ReadFile HeapCreate WriteFile OutputDebugStringA UnlockFileEx UnmapViewOfFile HeapValidate HeapSize OutputDebugStringW FlushViewOfFile HeapReAlloc GetNativeSystemInfo GetSystemInfo HeapCompact HeapDestroy LockFileEx GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter GetTickCount ReadDirectoryChangesW CancelIo

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

ntdll

NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError NtWriteFile NtOpenFile

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception _CxxThrowException memcmp memchr memcpy __CxxFrameHandler3 __C_specific_handler memset memmove strchr __current_exception_context strrchr

api-ms-win-crt-math-l1-1-0

fmod log __setusermatherr floor

api-ms-win-crt-string-l1-1-0

strcmp strcspn strncmp strspn strlen

api-ms-win-crt-heap-l1-1-0

malloc free _msize realloc _set_new_mode

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function terminate _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _set_app_type _endthreadex _configure_narrow_argv _exit _initialize_narrow_environment _get_initial_narrow_environment _initterm exit _seh_filter_exe _initterm_e _crt_atexit _beginthreadex

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_a986834e9d1c5cdc702200b623100450_akira_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic