2026-08-03_679c2cfd1bde79bc73c6bebd5a013750_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_679c2cfd1bde79bc73c6bebd5a013750_akira_cobalt-strike_rusty-stealer_satacom
Size 3.1MB
Sample260804-npsbasad57
SHA256 7cdb5205625b8353ea0c1594b15a7499454405a5030d3255bebbc74445b645ef
MD5 679c2cfd1bde79bc73c6bebd5a013750
SHA1 96801f7f853fa9ecd9f0eedd3ff0d97a8c3d78b1
SHA512 534ace4450ca2cc814213b5f7a4c7ffc0d60b1c999f95583e200594c7964e121f843130e3944e964772b9fbc0488852588e418eb5d3bff21e1d8cf8bbdde5cdc
SSDEEP 49152:lmY2ANesli9IMjjO56YPrKXhfzNI1EfnlUPxzVw9PqYT72Sihkt:07Dh3qPreoFkt
TLSH
T10BE55B03F26290E8C16EC178835AA237F73278998A3475EF16A85B313F6AF506F1D745
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_679c2cfd1bde79bc73c6bebd5a013750_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-03_679c2cfd1bde79bc73c6bebd5a013750_akira_cobalt-strike_rusty-stealer_satacom

.exe 3.1MB

2026-08-03_679c2cfd1bde79bc73c6bebd5a013750_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH ea1b44aec7a55d1f30f57d9893433465
SHA256 7cdb5205625b8353ea0c1594b15a7499454405a5030d3255bebbc74445b645ef
MD5 679c2cfd1bde79bc73c6bebd5a013750
SHA1 96801f7f853fa9ecd9f0eedd3ff0d97a8c3d78b1
SHA512 534ace4450ca2cc814213b5f7a4c7ffc0d60b1c999f95583e200594c7964e121f843130e3944e964772b9fbc0488852588e418eb5d3bff21e1d8cf8bbdde5cdc
SSDEEP 49152:lmY2ANesli9IMjjO56YPrKXhfzNI1EfnlUPxzVw9PqYT72Sihkt:07Dh3qPreoFkt
TLSH
T10BE55B03F26290E8C16EC178835AA237F73278998A3475EF16A85B313F6AF506F1D745
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2380064

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

aldebaran_docs.pdb

bcryptprimitives

ProcessPrng

ntdll

NtOpenFile RtlGetVersion RtlNtStatusToDosError NtWriteFile NtCreateNamedPipeFile

kernel32

RaiseException FlsGetValue EncodePointer InitializeSListHead LoadLibraryA SwitchToThread SetUnhandledExceptionFilter RtlUnwindEx GetFullPathNameW HeapReAlloc CreateWaitableTimerExW CreateProcessW GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive CreateDirectoryW ReleaseSRWLockExclusive LoadLibraryW CreateFileW GetCurrentThreadId GetModuleHandleW CreateThread QueryPerformanceCounter HeapFree RtlLookupFunctionEntry WaitForSingleObjectEx GetCurrentProcess GetCurrentProcessId WideCharToMultiByte ReleaseMutex WaitForSingleObject QueryPerformanceFrequency SetLastError FlsAlloc FlsFree FlsSetValue HeapAlloc IsThreadAFiber GetProcessHeap SleepEx FormatMessageW SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW GetFileAttributesW GetModuleFileNameW DuplicateHandle GetTempPathW GetFinalPathNameByHandleW SetWaitableTimer WriteFileEx ReadFileEx GetEnvironmentVariableW CreateMutexA GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext GetCommandLineW SetEnvironmentVariableW DeviceIoControl AddVectoredExceptionHandler GetCurrentThread SetThreadStackGuarantee GetModuleHandleA Sleep WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle GetProcAddress RtlPcToFileHeader DeleteCriticalSection GetUserDefaultUILanguage CloseHandle LCIDToLocaleName FreeLibrary GetLastError InitializeCriticalSectionEx LoadLibraryExW OutputDebugStringW OutputDebugStringA FindFirstFileExW GetSystemTimePreciseAsFileTime LoadLibraryExA FindNextFileW FindClose MultiByteToWideChar GetSystemInfo lstrlenW

ole32

CoInitialize CoCreateFreeThreadedMarshaler CoTaskMemAlloc CoCreateInstance CoInitializeEx RevokeDragDrop OleInitialize RegisterDragDrop CoTaskMemFree CoUninitialize

shell32

ILFree DragQueryFileW SHAppBarMessage ILCreateFromPathW SHOpenFolderAndSelectItems DragFinish ShellExecuteExW ShellExecuteW SHGetKnownFolderPath

oleaut32

SysFreeString GetErrorInfo SetErrorInfo SysStringLen

user32

SetWindowTextW GetWindowTextW GetWindowTextLengthW SetWindowDisplayAffinity GetWindow MonitorFromRect SetPropW SetParent EnableWindow CloseTouchInputHandle GetMonitorInfoW IsWindowVisible RegisterRawInputDevices IsIconic GetClipCursor ShowCursor SetWindowLongW GetSystemMenu DefWindowProcW GetSystemMetrics AdjustWindowRectEx GetMenu GetWindowLongW SystemParametersInfoW ReleaseCapture SetWindowRgn IsWindowEnabled InvalidateRgn SetWindowPlacement GetWindowPlacement ChangeDisplaySettingsExW RegisterWindowMessageA ToUnicodeEx GetTouchInputInfo GetKeyboardLayout MapVirtualKeyExW GetKeyboardState SetCapture GetParent DestroyIcon CreateIcon ScreenToClient DestroyMenu DrawTextW FindWindowExW UpdateWindow FillRect InvalidateRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo RemoveMenu SystemParametersInfoA SetMenu GetActiveWindow SendInput ShowWindow SendMessageW PostQuitMessage IsProcessDPIAware GetDC MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos AppendMenuW InsertMenuW CheckMenuItem CreateAcceleratorTableW DestroyAcceleratorTable VkKeyScanW SetMenuItemInfoW EnableMenuItem DrawMenuBar CreatePopupMenu CreateMenu GetKeyState GetAsyncKeyState MsgWaitForMultipleObjectsEx TranslateAcceleratorW SetFocus FlashWindowEx GetForegroundWindow EnumChildWindows DispatchMessageA GetMessageA SetWindowPos RegisterClassExW RegisterTouchWindow IsWindow SetWindowLongPtrW CreateWindowExW GetMenuItemInfoW DispatchMessageW TranslateMessage GetMessageW MapVirtualKeyW GetUpdateRect PeekMessageW PostThreadMessageW ValidateRect GetRawInputData DestroyWindow GetWindowLongPtrW PostMessageW RedrawWindow AdjustWindowRect MonitorFromPoint EnumDisplayMonitors LoadCursorW TrackMouseEvent ReleaseDC SetCursor DrawIconEx SetCursorPos ClipCursor

comctl32

SetWindowSubclass RemoveWindowSubclass DefSubclassProc TaskDialogIndirect

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

shlwapi

SHCreateMemStream

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow DwmGetWindowAttribute

gdi32

CreateSolidBrush DeleteObject BitBlt DeleteDC SelectObject CreateDIBSection CombineRgn CreateCompatibleDC SetTextColor GetDeviceCaps SetBkMode CreateRectRgn

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW RegGetValueW EventUnregister EventSetInformation EventRegister EventWriteTransfer

api-ms-win-crt-string-l1-1-0

wcslen strcpy_s wcscmp _wcsicmp

api-ms-win-crt-math-l1-1-0

__setusermatherr pow roundf floor trunc round

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _initialize_onexit_table _seh_filter_exe _exit _initterm _get_initial_narrow_environment _initterm_e terminate __p___argc _initialize_narrow_environment _configure_narrow_argv __p___argv _cexit _crt_atexit _set_app_type exit abort _c_exit _register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

calloc malloc _set_new_mode free _callnewh

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_679c2cfd1bde79bc73c6bebd5a013750_akira_cobalt-strike_rusty-stealer_satacom

bcryptprimitives

ntdll

kernel32

ole32

shell32

oleaut32

user32

comctl32

api-ms-win-core-synch-l1-2-0

shlwapi

dwmapi

gdi32

advapi32

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic