2026-08-03_34400c7f2c541600ee380f849bfef7b9_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_34400c7f2c541600ee380f849bfef7b9_akira_cobalt-strike_rusty-stealer_satacom
Size 135KB
Sample260804-dk447a1bre
SHA256 e142cbb310f3f53cd95ee0e8ded0dbc34515eb210aeb92bd9ddacb38dd7d1cb0
MD5 34400c7f2c541600ee380f849bfef7b9
SHA1 86434df31f5e717a5fe89f1af933bd6f9b935a5c
SHA512 1cf266516489ea1c3cf4bb4bcf8fd2d15b47f3480beeb6f3b64785552e4e881ad75fa0cb6d7cbce09c88161a5913428d3ca4c1ac4925ba94126468d8cc3cc7b0
SSDEEP 1536:qJw3wJEjWRKB4HhaK7u9OV8LRXKX0/mPLAof2jP3WBfquxy43aufMaKmfVHvP9r5:qBJy4BJ7ugmaWNof2KBxxhKugcZvNBD
TLSH
T1A5D37C13B94565FEE406C038C3568A67AB367CD60F3256FF02A561342F2DAE63F39606
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_34400c7f2c541600ee380f849bfef7b9_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-03_34400c7f2c541600ee380f849bfef7b9_akira_cobalt-strike_rusty-stealer_satacom

.exe 135KB

2026-08-03_34400c7f2c541600ee380f849bfef7b9_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 4492814db26cbbca1148a008d2222d93
SHA256 e142cbb310f3f53cd95ee0e8ded0dbc34515eb210aeb92bd9ddacb38dd7d1cb0
MD5 34400c7f2c541600ee380f849bfef7b9
SHA1 86434df31f5e717a5fe89f1af933bd6f9b935a5c
SHA512 1cf266516489ea1c3cf4bb4bcf8fd2d15b47f3480beeb6f3b64785552e4e881ad75fa0cb6d7cbce09c88161a5913428d3ca4c1ac4925ba94126468d8cc3cc7b0
SSDEEP 1536:qJw3wJEjWRKB4HhaK7u9OV8LRXKX0/mPLAof2jP3WBfquxy43aufMaKmfVHvP9r5:qBJy4BJ7ugmaWNof2KBxxhKugcZvNBD
TLSH
T1A5D37C13B94565FEE406C038C3568A67AB367CD60F3256FF02A561342F2DAE63F39606
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

95216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rustedroot_client.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime SetLastError GetFullPathNameW GetLastError GetSystemInfo GetSystemTimePreciseAsFileTime AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW GetCurrentProcessId CreateMutexA CloseHandle ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP WaitForSingleObject MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW GetModuleHandleW FormatMessageW QueryPerformanceFrequency QueryPerformanceCounter SetHandleInformation GetModuleHandleA CreateFileW GetFileInformationByHandle GetFileInformationByHandleEx FindFirstFileExW FindClose CreateWaitableTimerExW SetWaitableTimer Sleep

ntdll

RtlNtStatusToDosError NtWriteFile

ws2_32

WSAStartup WSACleanup WSASocketW closesocket connect freeaddrinfo WSAGetLastError getaddrinfo send recv

vcruntime140

memmove __current_exception_context __current_exception memset memcmp __CxxFrameHandler3 memcpy __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

exit _exit _initterm_e __p___argc __p___argv _cexit _initterm _register_thread_local_exe_atexit_callback _get_initial_narrow_environment _initialize_narrow_environment _seh_filter_exe _initialize_onexit_table _register_onexit_function _crt_atexit terminate _configure_narrow_argv _set_app_type _c_exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_34400c7f2c541600ee380f849bfef7b9_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

ws2_32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic