2026-08-06_139df3434997e7c5281969e3dcf32317_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_139df3434997e7c5281969e3dcf32317_akira_cobalt-strike_rusty-stealer_satacom
Size 11.1MB
Sample260807-bgmdvsvdlc
SHA256 ebd4feb0195aed856bd1e65122496a09ecf8891b50613c7dfb29dc2a8ddfb476
MD5 139df3434997e7c5281969e3dcf32317
SHA1 2d16f80984ee6bf307741b1e3dc239964e9c8acd
SHA512 513ba086dfecfbf443e9e4d4cb182e97b4b9835806553ef0652b1115aade9a27ca1aaa60e0c771f24a74d9e6d6de218d810542bce1bc9db49a23376c5646465e
SSDEEP 196608:DJ45/NfIyfNUpmQ454iP8e3fI7PGZ7s+VMu8a:DO5/NfIyfNUpmQ45A7Odt2u8a
TLSH
T1CDC6F7257A5B9968D08BC4B483478A674A3134DB0B35B9BF1484963C2F7EBF46F38319
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-06_139df3434997e7c5281969e3dcf32317_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-06_139df3434997e7c5281969e3dcf32317_akira_cobalt-strike_rusty-stealer_satacom

.exe 11.1MB

2026-08-06_139df3434997e7c5281969e3dcf32317_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH a4ac3c9e417003debd30a5b630b9b678
SHA256 ebd4feb0195aed856bd1e65122496a09ecf8891b50613c7dfb29dc2a8ddfb476
MD5 139df3434997e7c5281969e3dcf32317
SHA1 2d16f80984ee6bf307741b1e3dc239964e9c8acd
SHA512 513ba086dfecfbf443e9e4d4cb182e97b4b9835806553ef0652b1115aade9a27ca1aaa60e0c771f24a74d9e6d6de218d810542bce1bc9db49a23376c5646465e
SSDEEP 196608:DJ45/NfIyfNUpmQ454iP8e3fI7PGZ7s+VMu8a:DO5/NfIyfNUpmQ45A7Odt2u8a
TLSH
T1CDC6F7257A5B9968D08BC4B483478A674A3134DB0B35B9BF1484963C2F7EBF46F38319
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7252432

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

heavenly_studio.pdb

bcryptprimitives

ProcessPrng

advapi32

RegGetValueW RegOpenKeyExW RegQueryValueExW RegCloseKey EventWriteTransfer EventSetInformation EventRegister EventUnregister

ntdll

NtOpenFile NtCreateNamedPipeFile NtWriteFile NtReadFile RtlNtStatusToDosError RtlGetVersion

kernel32

FlsGetValue LoadLibraryW FlsSetValue FlsFree FlsAlloc EncodePointer RaiseException RtlPcToFileHeader LoadLibraryA lstrlenW FindNextFileW InitializeSListHead SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetEnvironmentVariableW DeleteFileW DeviceIoControl GetFinalPathNameByHandleW ReleaseMutex CreateMutexA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess FindClose FindFirstFileExW CopyFileExW RemoveDirectoryW GetSystemTimeAsFileTime SleepConditionVariableSRW WakeAllConditionVariable GetCommandLineW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AcquireSRWLockExclusive SetFilePointerEx CreateDirectoryW GetStdHandle GetEnvironmentStringsW CreateProcessW GetWindowsDirectoryW ReleaseSRWLockExclusive GetFullPathNameW GetSystemDirectoryW GetFileInformationByHandleEx GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess ReadFileEx GetCurrentProcessId GetFileAttributesW OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcessHeap HeapFree LoadLibraryExW SetUnhandledExceptionFilter RtlUnwindEx FreeLibrary CreateThread QueryPerformanceCounter QueryPerformanceFrequency GetCurrentThreadId HeapReAlloc GetModuleHandleW GetUserDefaultUILanguage SetFileTime SetFileInformationByHandle MoveFileExW SetLastError SleepEx WriteFileEx WaitForSingleObject FreeEnvironmentStringsW CompareStringOrdinal GetEnvironmentVariableW CreateFileW GetModuleHandleA Sleep GetProcAddress CloseHandle InitializeCriticalSectionEx DeleteCriticalSection GetConsoleMode AddVectoredExceptionHandler GetFileInformationByHandle LCIDToLocaleName GetTempPathW LoadLibraryExA FormatMessageW HeapAlloc

user32

AppendMenuW InsertMenuW DrawIconEx CheckMenuItem SetMenuItemInfoW CreateAcceleratorTableW DestroyAcceleratorTable RemoveMenu DrawMenuBar TrackPopupMenu CreatePopupMenu CreateMenu DrawTextW GetWindowDC OffsetRect GetMenuBarInfo GetMenuItemInfoW CreateIcon GetAsyncKeyState DestroyWindow TranslateAcceleratorW GetKeyboardState SendMessageW SendInput SetForegroundWindow GetMenu IsWindowVisible EnumDisplayMonitors MonitorFromPoint SetWindowTextW GetWindowTextW GetWindowTextLengthW GetMessageW TranslateMessage DispatchMessageW MapVirtualKeyExW GetKeyboardLayout ToUnicodeEx GetKeyState ClipCursor GetClipCursor SetMenu SetWindowLongW EnableMenuItem DestroyMenu SetWindowDisplayAffinity DestroyIcon GetRawInputData PostMessageW SystemParametersInfoA SetPropW ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx VkKeyScanW RegisterRawInputDevices FlashWindowEx LoadCursorW RegisterWindowMessageA GetWindow PeekMessageW PostThreadMessageW SetParent MapWindowPoints RedrawWindow SetFocus ShowWindow DefWindowProcW ValidateRect MapVirtualKeyW GetUpdateRect ReleaseDC GetDC IsProcessDPIAware EnableWindow IsWindowEnabled GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn ShowCursor ScreenToClient GetWindowLongW GetClientRect ClientToScreen GetCursorPos MonitorFromWindow GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos MonitorFromRect PostQuitMessage IsIconic EnumChildWindows DispatchMessageA GetMessageA RegisterClassExW GetMonitorInfoW AdjustWindowRect GetSystemMetrics FillRect RegisterTouchWindow IsWindow CreateWindowExW AdjustWindowRectEx InvalidateRgn SetWindowPos GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW SetCursor CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW GetSystemMenu

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

comctl32

RemoveWindowSubclass TaskDialogIndirect SetWindowSubclass DefSubclassProc

ole32

CoTaskMemAlloc OleInitialize RegisterDragDrop CoInitializeEx CoCreateInstance CoInitialize CoTaskMemFree CoCreateFreeThreadedMarshaler RevokeDragDrop CoUninitialize

gdi32

CreateRectRgn GetDeviceCaps SetTextColor SetBkMode SelectObject CreateDIBSection DeleteObject CombineRgn BitBlt CreateSolidBrush DeleteDC CreateCompatibleDC

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow DwmGetWindowAttribute

shlwapi

SHCreateMemStream

shell32

ShellExecuteExW ShellExecuteW DragQueryFileW DragFinish SHAppBarMessage ILCreateFromPathW ILFree SHGetKnownFolderPath SHOpenFolderAndSelectItems

oleaut32

SysFreeString SysStringLen SetErrorInfo GetErrorInfo

api-ms-win-crt-math-l1-1-0

roundf pow floor __setusermatherr trunc round

api-ms-win-crt-string-l1-1-0

strcpy_s wcslen wcscmp _wcsicmp

api-ms-win-crt-convert-l1-1-0

_ultow_s _wtoi wcstol

api-ms-win-crt-runtime-l1-1-0

_c_exit _register_thread_local_exe_atexit_callback _set_app_type _cexit _initterm_e _seh_filter_exe exit _initterm _exit __p___argv __p___argc abort terminate _configure_narrow_argv _crt_atexit _initialize_narrow_environment _register_onexit_function _initialize_onexit_table _get_initial_narrow_environment

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode malloc free _callnewh

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_139df3434997e7c5281969e3dcf32317_akira_cobalt-strike_rusty-stealer_satacom

bcryptprimitives

advapi32

ntdll

kernel32

user32

api-ms-win-core-synch-l1-2-0

comctl32

ole32

gdi32

dwmapi

shlwapi

shell32

oleaut32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic