2026-08-03_897d517f01c190f6480f1fc0c18311b4_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_897d517f01c190f6480f1fc0c18311b4_akira_rusty-stealer
Size 2.7MB
Sample260804-m2vrhstye1
SHA256 47497163516530fc1e02529f8da416e018fd0a31d89ebebf345b33e85c4a7c49
MD5 897d517f01c190f6480f1fc0c18311b4
SHA1 1a7a227230e9fcc12a74ed5bd8f30035df4792c3
SHA512 0910b5bbc16730fc91851f361ee49c42a91341c0da7ae61b499f1518c020a0a275f07cafc966cb2aaf347254c98742fe3663aa5a28ebdc5fe8eeeed335504e27
SSDEEP 24576:ZWqqgdLKQW1lLQSstdJzuE/pHQ3Aq0hfbze6p80WxcFx3iJrwmDhoFnF5HHAWmtw:ZWqq8MtQoIHoAjWO/6wmDh4FxAg
TLSH
T132D5BE1CF6E5B041C259D9F21869351367F228CEA2BB143D9FF6D9BEB8E446306291CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_897d517f01c190f6480f1fc0c18311b4_akira_rusty-stealer

File Explorer

2026-08-03_897d517f01c190f6480f1fc0c18311b4_akira_rusty-stealer

.exe 2.7MB

2026-08-03_897d517f01c190f6480f1fc0c18311b4_akira_rusty-stealer

IMPHASH 541b0029085032f903211a867b043898
SHA256 47497163516530fc1e02529f8da416e018fd0a31d89ebebf345b33e85c4a7c49
MD5 897d517f01c190f6480f1fc0c18311b4
SHA1 1a7a227230e9fcc12a74ed5bd8f30035df4792c3
SHA512 0910b5bbc16730fc91851f361ee49c42a91341c0da7ae61b499f1518c020a0a275f07cafc966cb2aaf347254c98742fe3663aa5a28ebdc5fe8eeeed335504e27
SSDEEP 24576:ZWqqgdLKQW1lLQSstdJzuE/pHQ3Aq0hfbze6p80WxcFx3iJrwmDhoFnF5HHAWmtw:ZWqq8MtQoIHoAjWO/6wmDh4FxAg
TLSH
T132D5BE1CF6E5B041C259D9F21869351367F228CEA2BB143D9FF6D9BEB8E446306291CC
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

158336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

loader.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetModuleHandleW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead CloseHandle CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread GetCurrentProcessId ReadFileEx GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetEnvironmentStringsW GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep GetFileAttributesW IsProcessorFeaturePresent FormatMessageW GetModuleHandleA GetTempPathW GetSystemTimeAsFileTime

ntdll

NtWriteFile NtCreateNamedPipeFile NtOpenFile RtlNtStatusToDosError

vcruntime140

memcmp __current_exception_context memset _CxxThrowException __C_specific_handler __current_exception memcpy memmove __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _seh_filter_exe _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_897d517f01c190f6480f1fc0c18311b4_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic