2026-08-03_49c59403076c35371bbe729f731cba65_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_49c59403076c35371bbe729f731cba65_akira_rusty-stealer
Size 756KB
Sample260804-dgdstser9v
SHA256 fb9ffe8aa0cde677788ba3eef90b20f403018b97613bbbd91b0ca57c7b11cb1b
MD5 49c59403076c35371bbe729f731cba65
SHA1 c6dfc3e8ca745d8971aff87ed98bfe31f354c04c
SHA512 cc2392c292390b2ac8d66832825ef476013173c59977cdb6fc23b7fff8d513e749a3446e765d75447b0cb70264027b62c8f3fe1789b26d5762b614a39b2628b3
SSDEEP 12288:MpQx5PyLbj8wJqXWSAGPhNsGNZOvEC4HS+rRbIctHfpbfI4Qi:sQGLb9mWSlP/vHS+rRNtHBfI45
TLSH
T102F4121A735591BDC906B07805A38167977D789A1B13E7EF1AE421385E29FC26F38F30
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_49c59403076c35371bbe729f731cba65_akira_rusty-stealer

File Explorer

2026-08-03_49c59403076c35371bbe729f731cba65_akira_rusty-stealer

.exe 756KB

2026-08-03_49c59403076c35371bbe729f731cba65_akira_rusty-stealer

IMPHASH 4d0eb7de1ffa7d9b31d563bf484df15a
SHA256 fb9ffe8aa0cde677788ba3eef90b20f403018b97613bbbd91b0ca57c7b11cb1b
MD5 49c59403076c35371bbe729f731cba65
SHA1 c6dfc3e8ca745d8971aff87ed98bfe31f354c04c
SHA512 cc2392c292390b2ac8d66832825ef476013173c59977cdb6fc23b7fff8d513e749a3446e765d75447b0cb70264027b62c8f3fe1789b26d5762b614a39b2628b3
SSDEEP 12288:MpQx5PyLbj8wJqXWSAGPhNsGNZOvEC4HS+rRbIctHfpbfI4Qi:sQGLb9mWSlP/vHS+rRNtHBfI45
TLSH
T102F4121A735591BDC906B07805A38167977D789A1B13E7EF1AE421385E29FC26F38F30
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

91436

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

stub.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

kernel32

GetModuleHandleW IsProcessorFeaturePresent SetUnhandledExceptionFilter GetProcessHeap HeapReAlloc CreateProcessW HeapFree GetCurrentThreadId GetLastError SetLastError GetEnvironmentVariableW GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW GetCurrentProcessId CreateMutexA CloseHandle ReleaseMutex RtlVirtualUnwind WideCharToMultiByte GetStdHandle GetConsoleMode GetConsoleOutputCP WaitForSingleObject MultiByteToWideChar WriteConsoleW HeapAlloc GetModuleHandleA GetModuleFileNameW GetFullPathNameW CreateFileW GetFileInformationByHandle GetFileInformationByHandleEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead QueryPerformanceCounter

ntdll

RtlNtStatusToDosError NtReadFile RtlInitUnicodeString NtWriteFile

vcruntime140

memset memcmp memcpy __CxxFrameHandler3 memmove __C_specific_handler __current_exception __current_exception_context

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback exit _initterm_e _set_app_type _seh_filter_exe _exit _register_onexit_function _crt_atexit terminate _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_49c59403076c35371bbe729f731cba65_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic