2026-08-03_123846c645b9da0c83af0fde40094300_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_123846c645b9da0c83af0fde40094300_akira_rusty-stealer
Size 5.2MB
Sample260803-lhjdpsfd75
SHA256 0fbda6cd93f1e797e00622ee297ab55c8002d2fbb95358ce6336659ea8efa439
MD5 123846c645b9da0c83af0fde40094300
SHA1 4553c06313f78f918f8560452721f6c30bbe6693
SHA512 7b3f14368c5b5b2a6769befec2459d1adb443dc3c8d2276c9ebf491a2c6dcf0c99186c2b2e6169b5bb5d6ffe6b4f174a8e6be7629624b47f6afb868bd3badcc6
SSDEEP 49152:E+YOw6OuoWJH0iez0/H6/Btrg4ITjy7KmJqgpi6zVpD+XO3atw1G9MCGj47tU:E8RDy7xoQE7K
TLSH
T14B464A167B9554ACC0ABC075835606229A3130DB1B26BAFF74DC92782F6AEF51F3D318
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_123846c645b9da0c83af0fde40094300_akira_rusty-stealer

File Explorer

2026-08-03_123846c645b9da0c83af0fde40094300_akira_rusty-stealer

.exe 5.2MB

2026-08-03_123846c645b9da0c83af0fde40094300_akira_rusty-stealer

IMPHASH 49845242f73ca936eefc2af09de8f84f
SHA256 0fbda6cd93f1e797e00622ee297ab55c8002d2fbb95358ce6336659ea8efa439
MD5 123846c645b9da0c83af0fde40094300
SHA1 4553c06313f78f918f8560452721f6c30bbe6693
SHA512 7b3f14368c5b5b2a6769befec2459d1adb443dc3c8d2276c9ebf491a2c6dcf0c99186c2b2e6169b5bb5d6ffe6b4f174a8e6be7629624b47f6afb868bd3badcc6
SSDEEP 49152:E+YOw6OuoWJH0iez0/H6/Btrg4ITjy7KmJqgpi6zVpD+XO3atw1G9MCGj47tU:E8RDy7xoQE7K
TLSH
T14B464A167B9554ACC0ABC075835606229A3130DB1B26BAFF74DC92782F6AEF51F3D318
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3857448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

git_runtime_contract-7b3de4fd0f0c0f67.pdb

kernel32

DeleteFileW LoadLibraryW UnlockFile GetProcAddress LocalFree GetFileSize GetCurrentProcessId GetModuleHandleW FreeLibrary WideCharToMultiByte FlushFileBuffers GetConsoleMode GetFileInformationByHandle ReleaseSemaphore CreateFileW WaitForSingleObjectEx CreateSemaphoreW GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle GetFileAttributesExW GetFileAttributesA GetLastError DeleteFileA Sleep SystemTimeToFileTime MultiByteToWideChar GetFileAttributesW WaitForSingleObject CreateMutexW GetTempPathW SetEndOfFile GetFullPathNameA SetFilePointer LockFile GetDiskFreeSpaceW GetFullPathNameW AreFileApisANSI GetCurrentThreadId LoadLibraryA GetDriveTypeW GetFileInformationByHandleEx SetFileInformationByHandle CreateEventW GetDiskFreeSpaceA CreateFileA GetProcessHeap HeapAlloc HeapFree IsProcessorFeaturePresent FormatMessageW CloseHandle GetTempPathA GetSystemTimePreciseAsFileTime InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter FindNextFileW GetModuleHandleA WaitForMultipleObjects GetFileType SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW GetModuleFileNameW GetFinalPathNameByHandleW ReleaseMutex CreateMutexA SwitchToThread ExitProcess FindClose FindFirstFileExW CopyFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetEnvironmentStringsW TerminateProcess GetExitCodeProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess GetOverlappedResult ReadFileEx CreateThread QueryPerformanceFrequency SetFileTime SetLastError SleepEx WriteFileEx FreeEnvironmentStringsW CompareStringOrdinal DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection RaiseException ReadFile HeapCreate WriteFile OutputDebugStringA UnlockFileEx UnmapViewOfFile HeapValidate HeapSize OutputDebugStringW FlushViewOfFile HeapReAlloc GetNativeSystemInfo GetSystemInfo HeapCompact HeapDestroy LockFileEx GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter GetTickCount ReadDirectoryChangesW CancelIo

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

ntdll

NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError NtWriteFile NtOpenFile

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception _CxxThrowException memcmp memchr __CxxFrameHandler3 memcpy __C_specific_handler memset memmove strchr __current_exception_context strrchr

api-ms-win-crt-math-l1-1-0

fmod log __setusermatherr floor

api-ms-win-crt-string-l1-1-0

strcmp strcspn strncmp strspn strlen

api-ms-win-crt-heap-l1-1-0

malloc free _msize realloc _set_new_mode

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function terminate _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _set_app_type _endthreadex _configure_narrow_argv _exit _initialize_narrow_environment _get_initial_narrow_environment _initterm exit _seh_filter_exe _initterm_e _crt_atexit _beginthreadex

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_123846c645b9da0c83af0fde40094300_akira_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic