2026-08-04_b33d307238fa082222614e61f8549cf8_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_b33d307238fa082222614e61f8549cf8_akira_cobalt-strike_rusty-stealer_satacom
Size 8.6MB
Sample260804-ghlfvagp81
SHA256 61ab9f731bb5cfb64d8f81af8d22fb9fe48785c69cc787e87fa186a750a3f7dc
MD5 b33d307238fa082222614e61f8549cf8
SHA1 85d8fe5cf1b4c14ac0097706490f52b31df8d5fd
SHA512 ca8e5ac907a17ff2f59a1dc9be3bc1c4179321eeb4dfb8b4c475736dc3be69c49b929bd2f87129abc783861948d1dff73b1613c3558bc9ff1325dc97f722f58e
SSDEEP 98304:OYbirVqE0nzjKvb1oceKdOpjK3DT3pzwZ0w7S3L4WpFNACxOc:BOQjKvb1oceKdOpj+DT3twGwQX2E
TLSH
T11896D5207A5F996CD09BC47483878A72096130DB0B39B9FF5494963C2F7ABF46F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_b33d307238fa082222614e61f8549cf8_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-04_b33d307238fa082222614e61f8549cf8_akira_cobalt-strike_rusty-stealer_satacom

.exe 8.6MB

2026-08-04_b33d307238fa082222614e61f8549cf8_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 0ca41d1b30546c486a95b41a9bac3363
SHA256 61ab9f731bb5cfb64d8f81af8d22fb9fe48785c69cc787e87fa186a750a3f7dc
MD5 b33d307238fa082222614e61f8549cf8
SHA1 85d8fe5cf1b4c14ac0097706490f52b31df8d5fd
SHA512 ca8e5ac907a17ff2f59a1dc9be3bc1c4179321eeb4dfb8b4c475736dc3be69c49b929bd2f87129abc783861948d1dff73b1613c3558bc9ff1325dc97f722f58e
SSDEEP 98304:OYbirVqE0nzjKvb1oceKdOpjK3DT3pzwZ0w7S3L4WpFNACxOc:BOQjKvb1oceKdOpj+DT3twGwQX2E
TLSH
T11896D5207A5F996CD09BC47483878A72096130DB0B39B9FF5494963C2F7ABF46F38259
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6242832

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ui.pdb

bcryptprimitives

ProcessPrng

advapi32

EventSetInformation RegOpenKeyExW RegQueryValueExW RegCloseKey EventUnregister EventRegister RegGetValueW EventWriteTransfer

ntdll

NtReadFile RtlNtStatusToDosError NtWriteFile RtlGetVersion NtOpenFile NtCreateNamedPipeFile

kernel32

FlsSetValue FlsFree EncodePointer FlsGetValue InitializeSListHead FlsAlloc RaiseException RtlPcToFileHeader GetSystemTimeAsFileTime LoadLibraryW FindNextFileW SetUnhandledExceptionFilter SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetEnvironmentVariableW DeviceIoControl GetFinalPathNameByHandleW ReleaseMutex CreateMutexA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess FindClose FindFirstFileExW GetCommandLineW RtlUnwindEx GetCurrentDirectoryW GetCurrentThread lstrlenW SleepConditionVariableSRW WakeAllConditionVariable LoadLibraryA AddVectoredExceptionHandler CreateDirectoryW GetStdHandle GetEnvironmentStringsW CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess ReadFileEx AcquireSRWLockExclusive ReleaseSRWLockExclusive GetCurrentProcessId GetFileAttributesW OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcessHeap HeapFree LoadLibraryExW GetFullPathNameW FreeLibrary CreateThread QueryPerformanceCounter QueryPerformanceFrequency GetModuleHandleW HeapReAlloc LCIDToLocaleName GetUserDefaultUILanguage SetFileTime SetFileInformationByHandle SetLastError SleepEx WriteFileEx FreeEnvironmentStringsW WaitForSingleObject CompareStringOrdinal GetEnvironmentVariableW GetModuleHandleA Sleep GetProcAddress CloseHandle CreateFileW InitializeCriticalSectionEx GetConsoleMode DeleteCriticalSection GetFileInformationByHandle SetThreadStackGuarantee GetCurrentThreadId GetTempPathW FormatMessageW LoadLibraryExA HeapAlloc

user32

TrackPopupMenu PostQuitMessage SetMenu RemoveMenu AppendMenuW InsertMenuW CheckMenuItem RedrawWindow SetMenuItemInfoW PostThreadMessageW CreateAcceleratorTableW DestroyAcceleratorTable DrawMenuBar CreatePopupMenu CreateMenu DrawIconEx GetMenuItemInfoW CreateIcon GetKeyboardLayout PeekMessageW GetUpdateRect ToUnicodeEx TranslateMessage SendInput SetForegroundWindow SetWindowTextW GetWindowTextW GetWindowTextLengthW DispatchMessageW SystemParametersInfoA SetPropW SendMessageW LoadCursorW SetWindowLongW EnableMenuItem GetSystemMenu GetMenu ShowCursor GetMenuBarInfo GetClipCursor IsWindowVisible MapVirtualKeyExW GetKeyState ScreenToClient GetKeyboardState SetWindowDisplayAffinity GetRawInputData EnumDisplayMonitors GetWindowLongW MonitorFromPoint DestroyIcon ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx OffsetRect RegisterRawInputDevices RegisterWindowMessageA GetWindow SetParent MapWindowPoints GetClientRect ClientToScreen SetFocus ShowWindow GetCursorPos GetWindowDC ValidateRect GetAsyncKeyState MonitorFromWindow MonitorFromRect GetMonitorInfoW EnableWindow IsWindowEnabled GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn DrawTextW IsProcessDPIAware GetDC FillRect TranslateAcceleratorW VkKeyScanW DestroyWindow SystemParametersInfoW DestroyMenu ClipCursor EnumChildWindows DispatchMessageA GetMessageA RegisterClassExW TrackMouseEvent ReleaseDC GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos GetSystemMetrics FlashWindowEx InvalidateRgn SetWindowPlacement GetWindowPlacement ChangeDisplaySettingsExW DefWindowProcW MapVirtualKeyW GetMessageW GetTouchInputInfo CloseTouchInputHandle RegisterTouchWindow IsWindow CreateWindowExW AdjustWindowRectEx IsIconic AdjustWindowRect SetWindowPos PostMessageW SetCursor

comctl32

SetWindowSubclass TaskDialogIndirect DefSubclassProc RemoveWindowSubclass

ole32

CoTaskMemFree CoUninitialize CoInitializeEx CoCreateInstance RegisterDragDrop OleInitialize RevokeDragDrop CoTaskMemAlloc CoCreateFreeThreadedMarshaler CoInitialize

gdi32

SetBkMode SetTextColor CreateSolidBrush DeleteObject CombineRgn CreateDIBSection CreateRectRgn CreateCompatibleDC DeleteDC SelectObject GetDeviceCaps BitBlt

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

shlwapi

SHCreateMemStream

shell32

ILFree DragFinish ILCreateFromPathW SHOpenFolderAndSelectItems ShellExecuteExW SHGetKnownFolderPath ShellExecuteW DragQueryFileW SHAppBarMessage

oleaut32

SysFreeString SetErrorInfo GetErrorInfo SysStringLen

api-ms-win-crt-math-l1-1-0

roundf pow trunc round __setusermatherr floor

api-ms-win-crt-string-l1-1-0

strcpy_s wcscmp wcslen _wcsicmp

api-ms-win-crt-convert-l1-1-0

_ultow_s _wtoi wcstol

api-ms-win-crt-runtime-l1-1-0

_initterm_e _cexit _register_thread_local_exe_atexit_callback __p___argv _set_app_type _exit _seh_filter_exe abort exit __p___argc _c_exit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment terminate _initterm _crt_atexit _register_onexit_function _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_callnewh free calloc _set_new_mode malloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_b33d307238fa082222614e61f8549cf8_akira_cobalt-strike_rusty-stealer_satacom

bcryptprimitives

advapi32

ntdll

kernel32

user32

comctl32

ole32

gdi32

dwmapi

api-ms-win-core-synch-l1-2-0

shlwapi

shell32

oleaut32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic