2026-08-04_bdcd63afa68ef998e5c0053f3b87f8cb_akira_icedid_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_bdcd63afa68ef998e5c0053f3b87f8cb_akira_icedid_rusty-stealer
Size 2.7MB
Sample260804-gbfxsasbmd
SHA256 552319b17f6583dfdff762cf5cb24c335fea2e39b52c637a567e37763f9fbbae
MD5 bdcd63afa68ef998e5c0053f3b87f8cb
SHA1 dea6684ca5ded4f327ced136ee8269e208a933c5
SHA512 f969f70640f4a160cc01054460fa57e245eec828a785fdd5dd4209a32a504adedf740ef5a0ab73078f1a605d0bb2c1f22b5979955d6a168b9eaf4103cdf35951
SSDEEP 49152:CX/p6nhEegnya3F9JxHls6qzXMLikssGLptNb5+Pl6bJTIZ5jdgpA:8IhEegnya3F9JRpqYLikssGLp/slgJTl
TLSH
T141D52911BA5A7BA8C05ACC7C83764A625E303CCB0B2578FF459471752F79AF71A38E18
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_bdcd63afa68ef998e5c0053f3b87f8cb_akira_icedid_rusty-stealer

File Explorer

2026-08-04_bdcd63afa68ef998e5c0053f3b87f8cb_akira_icedid_rusty-stealer

.exe 2.7MB

2026-08-04_bdcd63afa68ef998e5c0053f3b87f8cb_akira_icedid_rusty-stealer

IMPHASH f53184cf4065288a30131f219456a051
SHA256 552319b17f6583dfdff762cf5cb24c335fea2e39b52c637a567e37763f9fbbae
MD5 bdcd63afa68ef998e5c0053f3b87f8cb
SHA1 dea6684ca5ded4f327ced136ee8269e208a933c5
SHA512 f969f70640f4a160cc01054460fa57e245eec828a785fdd5dd4209a32a504adedf740ef5a0ab73078f1a605d0bb2c1f22b5979955d6a168b9eaf4103cdf35951
SSDEEP 49152:CX/p6nhEegnya3F9JxHls6qzXMLikssGLptNb5+Pl6bJTIZ5jdgpA:8IhEegnya3F9JRpqYLikssGLp/slgJTl
TLSH
T141D52911BA5A7BA8C05ACC7C83764A625E303CCB0B2578FF459471752F79AF71A38E18
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1331716

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

DiscordSystemHelper.pdb

kernel32

IsValidCodePage CreateMutexW GetCurrentProcess SetPriorityClass GetStringTypeW GetModuleHandleW GetCurrentThread GetFinalPathNameByHandleW InitializeCriticalSectionEx QueryPerformanceFrequency InitializeCriticalSectionAndSpinCount DeleteCriticalSection QueryFullProcessImageNameW LeaveCriticalSection CompareStringW LCMapStringW GetACP DisconnectNamedPipe GetExitCodeProcess OpenProcess SetDllDirectoryW SetDefaultDllDirectories GetActiveProcessorCount GetLastError ConnectNamedPipe QueryPerformanceCounter SetLastError CreateNamedPipeW SetNamedPipeHandleState CreateEventW CreateFileW GetSystemInfo WriteFile FlushFileBuffers CancelIoEx GetOverlappedResult WaitForSingleObject GetOEMCP ReadFile GetNamedPipeClientProcessId GetNamedPipeServerProcessId CloseHandle GetCPInfo EnterCriticalSection CancelIo SetStdHandle GetProcessHeap HeapAlloc HeapFree RtlPcToFileHeader RtlUnwindEx SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead LoadLibraryExA FormatMessageW GetConsoleMode SetConsoleMode SetConsoleTextAttribute GetConsoleScreenBufferInfo RaiseException GetTimeZoneInformationForYear HeapReAlloc lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx SetFileInformationByHandle EncodePointer HeapSize FlsFree FlsSetValue AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetCommandLineW FlsGetValue FlsAlloc GetCommandLineA GetModuleHandleExW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc IsProcessorFeaturePresent GetStartupInfoW RemoveDirectoryW CopyFileExW MoveFileExW CreateDirectoryW GetFileInformationByHandleEx GetSystemTimeAsFileTime SwitchToThread GetFileInformationByHandle DeleteFileW FindFirstFileExW FindClose GetFileType SetEnvironmentVariableW FreeLibrary VirtualQuery VirtualProtect FindNextFileW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess GetFullPathNameW GetCurrentThreadId GetModuleHandleA GetModuleFileNameW ExitProcess GetSystemTimePreciseAsFileTime MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep CreateThread FreeEnvironmentStringsW

advapi32

CreateProcessAsUserW OpenTraceW OpenSCManagerW OpenServiceW CreateServiceW ChangeServiceConfigW CloseServiceHandle ChangeServiceConfig2W ConvertStringSecurityDescriptorToSecurityDescriptorW SetServiceObjectSecurity ImpersonateNamedPipeClient CloseTrace ProcessTrace StartTraceW TraceQueryInformation EnableTraceEx2 ControlTraceW TraceSetInformation QueryServiceStatus StartServiceW RevertToSelf AdjustTokenPrivileges LookupPrivilegeValueW FreeSid CheckTokenMembership AllocateAndInitializeSid GetTokenInformation OpenProcessToken StartServiceCtrlDispatcherW DuplicateTokenEx OpenThreadToken SetServiceStatus RegisterServiceCtrlHandlerExW DeleteService

user32

TranslateMessage GetRawInputDeviceInfoW SetForegroundWindow GetForegroundWindow GetWindowThreadProcessId CreateWindowExW PostQuitMessage RegisterClassW GetMessageW GetRawInputData DefWindowProcW GetWindowLongPtrW SetWindowLongPtrW RegisterRawInputDevices DispatchMessageW PostMessageW

gdi32

D3DKMTSetProcessSchedulingPriorityClass

shell32

ShellExecuteExW SHGetKnownFolderPath

ole32

CoTaskMemFree

oleaut32

SysStringLen SysFreeString GetErrorInfo

ntdll

NtWriteFile RtlNtStatusToDosError

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

422KB

Virtual Size

422KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

280KB

Virtual Size

279KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

572KB

Virtual Size

576KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_bdcd63afa68ef998e5c0053f3b87f8cb_akira_icedid_rusty-stealer

kernel32

advapi32

user32

gdi32

shell32

ole32

oleaut32

ntdll

generic