2026-08-03_3f5578d83bfaf7990d206a301cb0e36d_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_3f5578d83bfaf7990d206a301cb0e36d_akira_rusty-stealer
Size 1.0MB
Sample260804-pg389szeqe
SHA256 2732af95e0733e14978a9e3ccd5e7f0a429a3584f0206cb57ead5e8b95737097
MD5 3f5578d83bfaf7990d206a301cb0e36d
SHA1 e1b814a6ff13905060caa255f81c042197b3bbc4
SHA512 f775573b2df2d99047cabcdabd084d02a084331b96c19ccc947951c4312fc6dd740dec163500b052902080903ea3cb2f9b2437072a46e12b498ac2d2b52b3095
SSDEEP 12288:stqUZPdA4rofHVMotxOS5o1hTPCSHsjCkHaGZbcXkXke0iO/7Msat6F91:Cla1j5IhTIjrrbckke09TMsa
TLSH
T144355C03F69680F8C09DC4B4831A9777AA32B8C90725BAEF17D45B212F69FA45F2D315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_3f5578d83bfaf7990d206a301cb0e36d_akira_rusty-stealer

File Explorer

2026-08-03_3f5578d83bfaf7990d206a301cb0e36d_akira_rusty-stealer

.exe 1.0MB

2026-08-03_3f5578d83bfaf7990d206a301cb0e36d_akira_rusty-stealer

IMPHASH ad0292b44ac0927611f3370dd98c9eda
SHA256 2732af95e0733e14978a9e3ccd5e7f0a429a3584f0206cb57ead5e8b95737097
MD5 3f5578d83bfaf7990d206a301cb0e36d
SHA1 e1b814a6ff13905060caa255f81c042197b3bbc4
SHA512 f775573b2df2d99047cabcdabd084d02a084331b96c19ccc947951c4312fc6dd740dec163500b052902080903ea3cb2f9b2437072a46e12b498ac2d2b52b3095
SSDEEP 12288:stqUZPdA4rofHVMotxOS5o1hTPCSHsjCkHaGZbcXkXke0iO/7Msat6F91:Cla1j5IhTIjrrbckke09TMsa
TLSH
T144355C03F69680F8C09DC4B4831A9777AA32B8C90725BAEF17D45B212F69FA45F2D315
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

780140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

client.pdb

kernel32

CloseHandle GetModuleHandleA GetSystemTimePreciseAsFileTime FindFirstFileExW GetLastError FindClose SwitchToThread LoadLibraryA GetProcAddress GetCurrentProcess FindFirstVolumeW FindNextVolumeW FindVolumeClose GetVolumePathNamesForVolumeNameW GetDriveTypeW GetVolumeInformationW GetConsoleWindow SetFilePointerEx WaitForSingleObject CreateToolhelp32Snapshot Thread32First OpenThread ResumeThread Thread32Next SuspendThread GetFileInformationByHandleEx SetFileInformationByHandle Beep CreateMutexW FindNextFileW WriteFileEx SleepEx GetExitCodeProcess AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc SetLastError GetFinalPathNameByHandleW GetQueuedCompletionStatusEx CreateIoCompletionPort SetFileCompletionNotificationModes LoadLibraryExA FormatMessageW GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW GetFullPathNameW CreateFileW SetFileTime GetFileInformationByHandle GetModuleHandleW GetModuleFileNameW GetTempPathW SetHandleInformation DeleteFileW QueryPerformanceFrequency CreateThread ReadFileEx QueryPerformanceCounter CreateWaitableTimerExW SetWaitableTimer Sleep ExitProcess CreateEventW CancelIo GetOverlappedResult ReadFile GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle WaitForMultipleObjects ReadProcessMemory VirtualQueryEx Process32FirstW Process32NextW GlobalMemoryStatusEx K32GetPerformanceInfo GetSystemInfo GetSystemTimes GetProcessIoCounters OpenProcess GetProcessTimes LocalFree GetDiskFreeSpaceExW DeviceIoControl GetComputerNameExW PostQueuedCompletionStatus SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent

oleaut32

SafeArrayAccessData SafeArrayUnaccessData VariantClear SafeArrayDestroy SysFreeString GetErrorInfo SysStringLen SysAllocStringLen

ntdll

NtQueryInformationProcess RtlGetVersion RtlNtStatusToDosError NtReadFile NtOpenFile NtCancelIoFileEx NtCreateFile NtWriteFile NtCreateNamedPipeFile NtDeviceIoControlFile

advapi32

CopySid GetLengthSid IsValidSid SystemFunction036 RegQueryValueExW RegOpenKeyExW OpenProcessToken RegCloseKey GetTokenInformation

mfplat

MFCreateSample MFShutdown MFCreateAttributes MFStartup

ole32

CoUninitialize CoInitializeSecurity CoSetProxyBlanket CoCreateInstance CoInitializeEx

mfreadwrite

MFCreateSourceReaderFromMediaSource

mf

MFEnumDeviceSources

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

shell32

SHEmptyRecycleBinW CommandLineToArgvW ShellExecuteW Shell_NotifyIconW

pdh

PdhCloseQuery PdhRemoveCounter PdhAddEnglishCounterW PdhGetFormattedCounterValue PdhEnumObjectsA PdhOpenQueryA PdhCollectQueryData

psapi

GetProcessMemoryInfo GetModuleFileNameExW

powrprof

CallNtPowerInformation

ws2_32

WSAGetLastError socket ioctlsocket connect shutdown getsockname bind WSAIoctl setsockopt WSAStartup getsockopt WSACleanup WSASocketW getaddrinfo freeaddrinfo recv send closesocket

bcryptprimitives

ProcessPrng

user32

RegisterClassA MessageBoxW mouse_event CreateWindowExA EnumDisplayMonitors LoadIconW SetCursorPos GetShellWindow GetSystemMetrics SendInput DispatchMessageA TranslateMessage LoadCursorW GetMessageA SetForegroundWindow ReleaseDC GetDesktopWindow DefWindowProcA GetKeyState DestroyWindow GetWindowTextA GetDlgItem SendMessageA PostQuitMessage SystemParametersInfoA FindWindowA PostMessageA GetForegroundWindow UpdateWindow FindWindowExA SetProcessDPIAware ShowWindow GetDC keybd_event

gdi32

CreateCompatibleBitmap DeleteObject SelectObject BitBlt DeleteDC CreateCompatibleDC GetDIBits

bcrypt

BCryptGenRandom

vcruntime140

__current_exception memmove __CxxFrameHandler3 memcpy memset __current_exception_context memcmp __C_specific_handler

api-ms-win-crt-math-l1-1-0

exp2 pow round roundf __setusermatherr

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-runtime-l1-1-0

_cexit __p___argv __p___argc _c_exit _register_thread_local_exe_atexit_callback _exit exit _initterm_e _initterm _get_initial_narrow_environment terminate _initialize_narrow_environment _configure_narrow_argv _set_app_type _seh_filter_exe _register_onexit_function _initialize_onexit_table _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_3f5578d83bfaf7990d206a301cb0e36d_akira_rusty-stealer

kernel32

oleaut32

ntdll

advapi32

mfplat

ole32

mfreadwrite

mf

api-ms-win-core-synch-l1-2-0

shell32

pdh

psapi

powrprof

ws2_32

bcryptprimitives

user32

gdi32

bcrypt

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic