2026-08-04_727b47c74af7d273e3ddfcaf7e235f8e_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_727b47c74af7d273e3ddfcaf7e235f8e_akira_cobalt-strike_rusty-stealer_satacom
Size 4.3MB
Sample260805-a4e3massht
SHA256 01c6d1aabdab9c457690580d5f2784f38b7bebfcd4d8156b7e17aa408954563e
MD5 727b47c74af7d273e3ddfcaf7e235f8e
SHA1 bb2e645087e122b3505318d1fd6ccfed1101270b
SHA512 e64369a2bfa318077f806b775d1b53385e76b47410c292c419b0546774e4ec549e98c731533c0f99f30d89d70e1445debe6b9a720363aa3fee67f87c6d9aaadb
SSDEEP 49152:FooHQ8HFiEJTGyzHS7ra8Ad3aBsUaREz/Xd9yK8e+HaCvdfcMiT7gRL8vQUyYtq:Pw+XErmxNw+vRL8vQeq
TLSH
T168265D03F65281E8C0AEC578935AA633E772F899093476EF27D81B212F26F506F5D358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-04_727b47c74af7d273e3ddfcaf7e235f8e_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-04_727b47c74af7d273e3ddfcaf7e235f8e_akira_cobalt-strike_rusty-stealer_satacom

.exe 4.3MB

2026-08-04_727b47c74af7d273e3ddfcaf7e235f8e_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 78ab464de9faf9d8aa5589c10f59096f
SHA256 01c6d1aabdab9c457690580d5f2784f38b7bebfcd4d8156b7e17aa408954563e
MD5 727b47c74af7d273e3ddfcaf7e235f8e
SHA1 bb2e645087e122b3505318d1fd6ccfed1101270b
SHA512 e64369a2bfa318077f806b775d1b53385e76b47410c292c419b0546774e4ec549e98c731533c0f99f30d89d70e1445debe6b9a720363aa3fee67f87c6d9aaadb
SSDEEP 49152:FooHQ8HFiEJTGyzHS7ra8Ad3aBsUaREz/Xd9yK8e+HaCvdfcMiT7gRL8vQUyYtq:Pw+XErmxNw+vRL8vQeq
TLSH
T168265D03F65281E8C0AEC578935AA633E772F899093476EF27D81B212F26F506F5D358
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e6:29:ad:59:d3:14:48:f9:7a:4e:d4:2c:f0:a2:36:ee:38:c2:c1:c5:96:72:31:ac:9f:d3:58:a7:45:fc:7d:c2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Colmax06,O=Colmax06,L=Paris,ST=IDF,C=FR

Chains

Jul 31, 2026

CN=Colmax06,O=Colmax06,L=Paris,ST=IDF,C=FR

Subject

CN=Colmax06,O=Colmax06,L=Paris,ST=IDF,C=FR

Serial Number

4a:6f:11:ce:79:f8:77:ef:c4:ab:db:8e:52:39:4f:55:b9:67:b5:d7

Issuer

CN=Colmax06,O=Colmax06,L=Paris,ST=IDF,C=FR

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 31, 2026 - Jul 31, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

3168128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

vencord_injector.pdb

bcryptprimitives

ProcessPrng

ntdll

RtlGetVersion RtlNtStatusToDosError NtCancelIoFileEx NtDeviceIoControlFile NtWriteFile NtQueryInformationProcess NtCreateNamedPipeFile NtOpenFile NtReadFile

kernel32

MultiByteToWideChar SleepEx QueryPerformanceFrequency GetModuleHandleW FormatMessageW QueryPerformanceCounter CreateThread ExitProcess TerminateProcess GetExitCodeProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW WaitForSingleObject GetModuleFileNameW DuplicateHandle CreateWaitableTimerExW SetWaitableTimer GetSystemTimePreciseAsFileTime CreateToolhelp32Snapshot Process32FirstW OpenProcess GetProcessTimes Process32NextW GetSystemInfo GetSystemTimes GetProcessIoCounters ReleaseMutex WideCharToMultiByte CreateMutexA GetCurrentProcess WaitForSingleObjectEx RtlVirtualUnwind RtlLookupFunctionEntry ReadProcessMemory RtlCaptureContext VirtualQueryEx GetCurrentThreadId LocalFree GetModuleHandleA Sleep LoadLibraryW LoadLibraryA GetProcAddress ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SwitchToThread SleepConditionVariableSRW GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter RtlUnwindEx RtlPcToFileHeader RaiseException FlsAlloc FlsGetValue FlsSetValue FlsFree CloseHandle GetLastError SetEnvironmentVariableW GetCommandLineW FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentVariableW GetCurrentDirectoryW CreateIoCompletionPort PostQueuedCompletionStatus FindNextFileW MoveFileExW CopyFileExW DeleteFileW RemoveDirectoryW GetTempPathW GetFileAttributesW CreateDirectoryW GetFileInformationByHandleEx SetLastError GetFileInformationByHandle lstrlenW FindClose FindFirstFileExW SetFileInformationByHandle SetFileTime CreateFileW GetFullPathNameW WriteFileEx ReadFileEx WriteConsoleW EncodePointer DeleteCriticalSection GetConsoleOutputCP GetConsoleMode GetStdHandle GetQueuedCompletionStatusEx GetFinalPathNameByHandleW HeapReAlloc HeapFree HeapAlloc GetProcessHeap GetCurrentThread FreeLibrary SetThreadStackGuarantee AddVectoredExceptionHandler GetCurrentProcessId LoadLibraryExW OutputDebugStringW OutputDebugStringA LoadLibraryExA GetProcessId RegisterWaitForSingleObject LCIDToLocaleName GetUserDefaultUILanguage UnregisterWaitEx InitializeCriticalSectionEx CreateProcessW

shell32

SHCreateItemFromParsingName SHAppBarMessage DragQueryFileW CommandLineToArgvW SHGetKnownFolderPath ShellExecuteW DragFinish

ole32

RegisterDragDrop CoUninitialize CoInitializeEx CoTaskMemFree OleInitialize CoCreateInstance RevokeDragDrop CoTaskMemAlloc CoCreateFreeThreadedMarshaler

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

comctl32

TaskDialogIndirect SetWindowSubclass DefSubclassProc RemoveWindowSubclass

user32

SetCursorPos GetAsyncKeyState GetUpdateRect SetCursor GetRawInputData MsgWaitForMultipleObjectsEx LoadCursorW GetForegroundWindow FlashWindowEx GetMessageW TrackMouseEvent UpdateWindow IsWindow CreateWindowExW IsWindowEnabled EnumDisplayMonitors IsIconic IsWindowVisible EnableWindow RedrawWindow SetPropW MonitorFromRect DestroyWindow SetWindowLongPtrW GetWindowLongPtrW RegisterTouchWindow MapVirtualKeyW SystemParametersInfoW GetKeyState MonitorFromPoint ClipCursor GetSystemMetrics GetClipCursor ShowCursor DefWindowProcW RegisterClassExW RegisterRawInputDevices EnumChildWindows GetWindowTextW GetWindowTextLengthW SetWindowDisplayAffinity ReleaseCapture ToUnicodeEx GetKeyboardLayout InvalidateRect MapVirtualKeyExW GetKeyboardState TranslateAcceleratorW ScreenToClient GetMonitorInfoW GetWindowPlacement SetWindowPlacement PeekMessageW ChangeDisplaySettingsExW AdjustWindowRectEx GetMenu GetWindowLongW SetWindowLongW GetSystemMenu InvalidateRgn SetWindowPos RegisterWindowMessageA SetCapture GetTouchInputInfo CloseTouchInputHandle TranslateMessage DispatchMessageW SetParent FindWindowExW SetFocus GetWindow DispatchMessageA GetMessageA AdjustWindowRect IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos SendInput DrawTextW FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo ShowWindow SendMessageW PostQuitMessage SystemParametersInfoA PostMessageW GetActiveWindow SetMenu CreateIcon RemoveMenu CheckMenuItem EnableMenuItem GetMenuItemInfoW DrawMenuBar CreatePopupMenu CreateMenu DrawIconEx ReleaseDC GetDC VkKeyScanW SetMenuItemInfoW AppendMenuW InsertMenuW CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu GetParent SetWindowRgn PostThreadMessageW SetWindowTextW ValidateRect

gdi32

SetBkMode GetDeviceCaps CreateRectRgn CreateCompatibleDC DeleteObject SetTextColor CreateDIBSection CombineRgn DeleteDC CreateSolidBrush BitBlt SelectObject

psapi

GetProcessMemoryInfo GetModuleFileNameExW

advapi32

GetLengthSid EventWriteTransfer OpenProcessToken GetTokenInformation RegOpenKeyExW RegQueryValueExW RegCloseKey EventSetInformation IsValidSid EventRegister EventUnregister CopySid RegGetValueW

oleaut32

GetErrorInfo SysStringLen SetErrorInfo SysFreeString

powrprof

CallNtPowerInformation

pdh

PdhRemoveCounter PdhCloseQuery

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow DwmGetWindowAttribute

shlwapi

SHCreateMemStream

api-ms-win-crt-math-l1-1-0

floor pow trunc round roundf __setusermatherr

api-ms-win-crt-string-l1-1-0

strcpy_s _wcsicmp wcslen wcscmp

api-ms-win-crt-convert-l1-1-0

wcstol _wtoi _ultow_s

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _seh_filter_exe _configure_narrow_argv _initterm_e exit _exit _register_onexit_function _cexit _crt_atexit _c_exit _initterm _set_app_type _get_initial_narrow_environment _initialize_narrow_environment terminate __p___argc __p___argv abort _register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode calloc _callnewh malloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_727b47c74af7d273e3ddfcaf7e235f8e_akira_cobalt-strike_rusty-stealer_satacom

PE Signature issue

bcryptprimitives

ntdll

kernel32

shell32

ole32

api-ms-win-core-synch-l1-2-0

comctl32

user32

gdi32

psapi

advapi32

oleaut32

powrprof

pdh

dwmapi

shlwapi

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic