2026-08-04_011430d655f686957adaca12a2ba680b_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_011430d655f686957adaca12a2ba680b_akira_cobalt-strike_rusty-stealer_satacom
Size 796KB
Sample260804-vdd3vsdh23
SHA256 c903f61a9fdc93d8b14215db4788e5b74d3a5a1e284b9e20df67706185bd71a1
MD5 011430d655f686957adaca12a2ba680b
SHA1 30811f44cbe79a62347224415580a3664ac98aad
SHA512 1d133fa5b7456c97b9b94cae48150f206f1247b0b22b1d40e6cebb929a0ff58851021795deb011326e9c0bdf6df35583c5a7a2d8b02a7d9aff0b4a8d10050065
SSDEEP 12288:XpPVyT6r/h2Kr7dfJmOI54WQoGq66/KnVkEnK:5S6r/ko7mOIbQoGq68Mk
TLSH
T1EB050925BB5A98ACC05AC47083464A736A7170CB1B35B9FF41D492783F6AAF51F3C728
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_011430d655f686957adaca12a2ba680b_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-04_011430d655f686957adaca12a2ba680b_akira_cobalt-strike_rusty-stealer_satacom

.exe 796KB

2026-08-04_011430d655f686957adaca12a2ba680b_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH f28c9a346a27fceb72f9909c0f22da89
SHA256 c903f61a9fdc93d8b14215db4788e5b74d3a5a1e284b9e20df67706185bd71a1
MD5 011430d655f686957adaca12a2ba680b
SHA1 30811f44cbe79a62347224415580a3664ac98aad
SHA512 1d133fa5b7456c97b9b94cae48150f206f1247b0b22b1d40e6cebb929a0ff58851021795deb011326e9c0bdf6df35583c5a7a2d8b02a7d9aff0b4a8d10050065
SSDEEP 12288:XpPVyT6r/h2Kr7dfJmOI54WQoGq66/KnVkEnK:5S6r/ko7mOIbQoGq68Mk
TLSH
T1EB050925BB5A98ACC05AC47083464A736A7170CB1B35B9FF41D492783F6AAF51F3C728
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

604384

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

lassowrap.pdb

kernel32

SetFileInformationByHandle GetCurrentProcess DuplicateHandle GetCommandLineW GetEnvironmentVariableW GetEnvironmentStringsW GetCurrentDirectoryW SetLastError RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext QueryPerformanceCounter WaitForSingleObject GetStdHandle GetCurrentProcessId GetCurrentThread WriteFileEx SetThreadStackGuarantee GetExitCodeProcess GetProcessId AddVectoredExceptionHandler HeapReAlloc lstrlenW ReleaseMutex CompareStringOrdinal GetModuleHandleW GetModuleFileNameW ExitProcess CreateNamedPipeW ReadFileEx CreateThread GetFullPathNameW GetModuleHandleA GetProcAddress HeapAlloc FreeEnvironmentStringsW CreateFileW GetFileInformationByHandleEx GetFileType GetCurrentThreadId SetConsoleTextAttribute GetConsoleScreenBufferInfo SetConsoleMode GetConsoleMode GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetConsoleOutputCP MultiByteToWideChar WriteConsoleW WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA FormatMessageW LoadLibraryExA GetLastError HeapFree GetProcessHeap IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetPriorityClass SetProcessAffinityMask OpenProcess SleepEx CloseHandle SetUnhandledExceptionFilter

oleaut32

SysFreeString SysStringLen

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

ntdll

RtlNtStatusToDosError NtWriteFile

vcruntime140

memcmp __CxxFrameHandler3 __current_exception_context __current_exception __C_specific_handler _CxxThrowException memmove memset memcpy

api-ms-win-crt-runtime-l1-1-0

exit _exit _set_app_type _initterm_e _initterm __p___argc __p___argv _cexit _get_initial_narrow_environment _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment _configure_narrow_argv _seh_filter_exe _initialize_onexit_table _register_onexit_function _crt_atexit terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_011430d655f686957adaca12a2ba680b_akira_cobalt-strike_rusty-stealer_satacom

kernel32

oleaut32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic