2026-08-04_a842c1da1615b82417cbe22422ea024b_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_a842c1da1615b82417cbe22422ea024b_akira_rusty-stealer
Size 124KB
Sample260804-gpf5pssdmh
SHA256 9d31cb8b0352d4a54c09dbc4df400649568776d7e83e551b1c6368ed4a73cf27
MD5 a842c1da1615b82417cbe22422ea024b
SHA1 1e1dcf702c3b2f27d0b085e6f5c28513656f2cd8
SHA512 90357464ec4c8ac710e2b6d1ab809eda7dec4c01dc9dcd82ecbf5d2fa79119b05219d10ccbac87e332e23e0a003d0ec3f0e95f971b796292287bd80b92260dd5
SSDEEP 1536:KX5Yc1PvNa414tVhT12zpOroimHELHqANVsvshHsJveCsgg4N2ALQf2nBCdHQwb:4Yc1Y4GtVpCYriqqANqvSWu0NBCRQ
TLSH
T19FC36D13794450F9E146C038931186A3A776B8D60F225BFF17A821391F5F9E6AF3DB28
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_a842c1da1615b82417cbe22422ea024b_akira_rusty-stealer

File Explorer

2026-08-04_a842c1da1615b82417cbe22422ea024b_akira_rusty-stealer

.exe 124KB

2026-08-04_a842c1da1615b82417cbe22422ea024b_akira_rusty-stealer

IMPHASH a7fa668e12412862191aa0ed58fcd51c
SHA256 9d31cb8b0352d4a54c09dbc4df400649568776d7e83e551b1c6368ed4a73cf27
MD5 a842c1da1615b82417cbe22422ea024b
SHA1 1e1dcf702c3b2f27d0b085e6f5c28513656f2cd8
SHA512 90357464ec4c8ac710e2b6d1ab809eda7dec4c01dc9dcd82ecbf5d2fa79119b05219d10ccbac87e332e23e0a003d0ec3f0e95f971b796292287bd80b92260dd5
SSDEEP 1536:KX5Yc1PvNa414tVhT12zpOroimHELHqANVsvshHsJveCsgg4N2ALQf2nBCdHQwb:4Yc1Y4GtVpCYriqqANqvSWu0NBCRQ
TLSH
T19FC36D13794450F9E146C038931186A3A776B8D60F225BFF17A821391F5F9E6AF3DB28
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

86880

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

AudioServiceHost.pdb

kernel32

LoadLibraryA GetProcAddress FreeLibrary SetLastError GetFullPathNameW GetLastError CreateFileW SetFileInformationByHandle CloseHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP WaitForSingleObject MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW GetModuleHandleW FormatMessageW QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleA CreateWaitableTimerExW SetWaitableTimer Sleep SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

ntdll

RtlNtStatusToDosError NtWriteFile

vcruntime140

memcpy __CxxFrameHandler3 memcmp memset memmove __C_specific_handler __current_exception __current_exception_context

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _set_app_type _register_thread_local_exe_atexit_callback exit _initterm_e _seh_filter_exe _initialize_onexit_table _register_onexit_function _crt_atexit terminate _initterm _get_initial_narrow_environment _exit _initialize_narrow_environment _configure_narrow_argv _c_exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_a842c1da1615b82417cbe22422ea024b_akira_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic