2026-08-03_c94d93683d441994befa9363144290c9_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_c94d93683d441994befa9363144290c9_akira_rusty-stealer
Size 5.1MB
Sample260803-ksqebseq7w
SHA256 d50f76f39b8271f455f693ad9a60e39cd8886171bfc0eb3bc630ddd5ab27a65b
MD5 c94d93683d441994befa9363144290c9
SHA1 2b081b2540e22d15b912d3e9a2690cb027c3bfde
SHA512 818051b4bfb175de966a94b8f467f96c5a5d7c0a9960f4b1f899eb7fd17063586eeffd9f4c212439e969900580e9c32d58d0c6e1d7e0e6b9e7620077a50426d3
SSDEEP 49152:14NYwsZRC6xuHzIi0Fd58+HW+w1ZS0WwFce0tnf69bDMC7JNdIpf7vp3:1dCEg1ezB7vp
TLSH
T108363A167B9950ACC0ABC075934646229A3130DB1B25BAFF74DC92782F6AEF51F3D324
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_c94d93683d441994befa9363144290c9_akira_rusty-stealer

File Explorer

2026-08-03_c94d93683d441994befa9363144290c9_akira_rusty-stealer

.exe 5.1MB

2026-08-03_c94d93683d441994befa9363144290c9_akira_rusty-stealer

IMPHASH d70a3aaa59428558ed6a6f33787d0394
SHA256 d50f76f39b8271f455f693ad9a60e39cd8886171bfc0eb3bc630ddd5ab27a65b
MD5 c94d93683d441994befa9363144290c9
SHA1 2b081b2540e22d15b912d3e9a2690cb027c3bfde
SHA512 818051b4bfb175de966a94b8f467f96c5a5d7c0a9960f4b1f899eb7fd17063586eeffd9f4c212439e969900580e9c32d58d0c6e1d7e0e6b9e7620077a50426d3
SSDEEP 49152:14NYwsZRC6xuHzIi0Fd58+HW+w1ZS0WwFce0tnf69bDMC7JNdIpf7vp3:1dCEg1ezB7vp
TLSH
T108363A167B9950ACC0ABC075934646229A3130DB1B25BAFF74DC92782F6AEF51F3D324
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3727128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

publication_contract-681c33e34ebe477c.pdb

kernel32

DeleteFileW LoadLibraryW UnlockFile GetProcAddress LocalFree GetFileSize GetCurrentProcessId GetModuleHandleW FreeLibrary WideCharToMultiByte FlushFileBuffers GetConsoleMode GetFileInformationByHandle ReleaseSemaphore CreateFileW WaitForSingleObjectEx CreateSemaphoreW GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle GetFileAttributesExW GetFileAttributesA GetLastError DeleteFileA Sleep SystemTimeToFileTime MultiByteToWideChar GetFileAttributesW WaitForSingleObject CreateMutexW GetTempPathW SetEndOfFile GetFullPathNameA SetFilePointer LockFile GetDiskFreeSpaceW GetFullPathNameW AreFileApisANSI GetCurrentThreadId LoadLibraryA GetDriveTypeW GetFileInformationByHandleEx SetFileInformationByHandle CreateEventW GetDiskFreeSpaceA CreateFileA GetProcessHeap HeapAlloc HeapFree IsProcessorFeaturePresent FormatMessageW CloseHandle GetTempPathA GetSystemTimePreciseAsFileTime InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter FindNextFileW GetModuleHandleA WaitForMultipleObjects GetFileType SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW GetModuleFileNameW GetFinalPathNameByHandleW ReleaseMutex CreateMutexA SwitchToThread ExitProcess FindClose FindFirstFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetEnvironmentStringsW TerminateProcess GetExitCodeProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess GetOverlappedResult ReadFileEx CreateThread QueryPerformanceFrequency SetFileTime SetLastError SleepEx WriteFileEx FreeEnvironmentStringsW CompareStringOrdinal DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection RaiseException ReadFile HeapCreate WriteFile OutputDebugStringA UnlockFileEx UnmapViewOfFile HeapValidate HeapSize OutputDebugStringW FlushViewOfFile HeapReAlloc GetNativeSystemInfo GetSystemInfo HeapCompact HeapDestroy LockFileEx GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter GetTickCount ReadDirectoryChangesW CancelIo

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

ntdll

NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError NtWriteFile NtOpenFile

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception _CxxThrowException memcmp memchr memcpy __CxxFrameHandler3 __C_specific_handler memset memmove strchr __current_exception_context strrchr

api-ms-win-crt-math-l1-1-0

fmod log __setusermatherr floor

api-ms-win-crt-string-l1-1-0

strcmp strcspn strncmp strspn strlen

api-ms-win-crt-heap-l1-1-0

malloc free _msize realloc _set_new_mode

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function terminate _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _set_app_type _endthreadex _configure_narrow_argv _exit _initialize_narrow_environment _get_initial_narrow_environment _initterm exit _seh_filter_exe _initterm_e _crt_atexit _beginthreadex

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_c94d93683d441994befa9363144290c9_akira_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic