2026-08-04_6eeaaa4042ad1a7988b49b06122f9b73_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_6eeaaa4042ad1a7988b49b06122f9b73_akira_rusty-stealer
Size 4.3MB
Sample260805-a41dkabb67
SHA256 e8c41f9dc0f1f7f5c2e4040eb1809c676ff2ba7f3411c7b7fca6c57623b7c58c
MD5 6eeaaa4042ad1a7988b49b06122f9b73
SHA1 3a97e18e08fe30c93afe61d33e3137ac0839c215
SHA512 256fbba1cd8f6d56ddc69359c42ed377e65621aefdcac404e533a40ae7aec9643c43c20082fa964ec26ef989bc9022878352408aa9ccf9dba5216dbcd5d6bf84
SSDEEP 49152:LMFyHVvd1gIwzujqnNRZc+aHXzrCAdzxQ22406nHVD39bsGPbbcmwLJ+zKzX51m8:20lwwO2LHBz1iCj4yuMIFRZ
TLSH
T1872639127A5B9CBCD45AC874830A4A630E2134DB1B26BEEF41C496393FADBE45F39315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_6eeaaa4042ad1a7988b49b06122f9b73_akira_rusty-stealer

File Explorer

2026-08-04_6eeaaa4042ad1a7988b49b06122f9b73_akira_rusty-stealer

.exe 4.3MB

2026-08-04_6eeaaa4042ad1a7988b49b06122f9b73_akira_rusty-stealer

IMPHASH 36719aa767c97b0d2ce0bd0dd1cdf9d6
SHA256 e8c41f9dc0f1f7f5c2e4040eb1809c676ff2ba7f3411c7b7fca6c57623b7c58c
MD5 6eeaaa4042ad1a7988b49b06122f9b73
SHA1 3a97e18e08fe30c93afe61d33e3137ac0839c215
SHA512 256fbba1cd8f6d56ddc69359c42ed377e65621aefdcac404e533a40ae7aec9643c43c20082fa964ec26ef989bc9022878352408aa9ccf9dba5216dbcd5d6bf84
SSDEEP 49152:LMFyHVvd1gIwzujqnNRZc+aHXzrCAdzxQ22406nHVD39bsGPbbcmwLJ+zKzX51m8:20lwwO2LHBz1iCj4yuMIFRZ
TLSH
T1872639127A5B9CBCD45AC874830A4A630E2134DB1B26BEEF41C496393FADBE45F39315
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4390912

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileInformationByHandleEx CloseHandle GetFileType CreateFileW CreateDirectoryW ReadConsoleW GetFileInformationByHandle FindFirstFileExW GetProcAddress SetLastError GetConsoleOutputCP GetModuleHandleA GetLastError MoveFileExW SetFileTime FindNextFileW GetStdHandle GetConsoleMode SetConsoleMode WriteConsoleW DuplicateHandle GetConsoleScreenBufferInfo SetFileInformationByHandle GetFullPathNameW SetConsoleTextAttribute FindClose WaitForSingleObject SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetModuleFileNameW ExitProcess QueryPerformanceCounter FormatMessageW GetModuleHandleW QueryPerformanceFrequency GetEnvironmentVariableW HeapAlloc MultiByteToWideChar IsProcessorFeaturePresent ReleaseMutex WideCharToMultiByte CreateMutexA GetCurrentProcessId lstrlenW LoadLibraryA WaitForSingleObjectEx GetCurrentDirectoryW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId CreateThread VirtualProtect GetCurrentProcess MapViewOfFile CreateFileMappingW UnmapViewOfFile GetProcessHeap HeapFree HeapReAlloc GetCommandLineW SwitchToThread AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetSystemTimePreciseAsFileTime GetSystemInfo

ntdll

NtReadFile NtWriteFile NtOpenFile RtlNtStatusToDosError

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

vcruntime140

__CxxFrameHandler3 memcpy memcmp memmove memset __current_exception __C_specific_handler _CxxThrowException __current_exception_context

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment terminate _crt_atexit _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _exit exit _initterm_e _initterm _initialize_narrow_environment _configure_narrow_argv _set_app_type _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Name

.text

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

98KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rcd7cb

Size

120KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_6eeaaa4042ad1a7988b49b06122f9b73_akira_rusty-stealer

kernel32

ntdll

bcryptprimitives

api-ms-win-core-synch-l1-2-0

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic