2026-08-07_ff9f56c68c421b50abfa9de79fa2f87a_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-07_ff9f56c68c421b50abfa9de79fa2f87a_akira_cobalt-strike_rusty-stealer_satacom
Size 182KB
Sample260807-he7ekssvdt
SHA256 ce20624dd93e2c09d6cc601c90fcc453fdc387fc24b5912b5897df91df70079a
MD5 ff9f56c68c421b50abfa9de79fa2f87a
SHA1 0bd6b7d36c6079add07d0ea900ea12ad6bd138e1
SHA512 eb37c1e0e29074b8bdafc939ba3989a87a035f56289606cd1479abdaa6472658d878b5e1ae4f6b2db58d400904fea3d9c616f7661fcfa8de9544414f056afae7
SSDEEP 1536:6le1FPWIqZ4oGclSYfNVme1wu2ypHtmiNrDWF5DWLxs0JxPnLb82SxeikjQO:60hWFmoGcl02iy9tm4PxR3qxefjQ
TLSH
T17A044A12764195E8D485C038C324C5B6A722BC991F225BEF13E53E3B3F799E26F38654
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_ff9f56c68c421b50abfa9de79fa2f87a_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-07_ff9f56c68c421b50abfa9de79fa2f87a_akira_cobalt-strike_rusty-stealer_satacom

.exe 182KB

2026-08-07_ff9f56c68c421b50abfa9de79fa2f87a_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH ade87bf26d6bcbd35b20ebe09f27a23c
SHA256 ce20624dd93e2c09d6cc601c90fcc453fdc387fc24b5912b5897df91df70079a
MD5 ff9f56c68c421b50abfa9de79fa2f87a
SHA1 0bd6b7d36c6079add07d0ea900ea12ad6bd138e1
SHA512 eb37c1e0e29074b8bdafc939ba3989a87a035f56289606cd1479abdaa6472658d878b5e1ae4f6b2db58d400904fea3d9c616f7661fcfa8de9544414f056afae7
SSDEEP 1536:6le1FPWIqZ4oGclSYfNVme1wu2ypHtmiNrDWF5DWLxs0JxPnLb82SxeikjQO:60hWFmoGcl02iy9tm4PxR3qxefjQ
TLSH
T17A044A12764195E8D485C038C324C5B6A722BC991F225BEF13E53E3B3F799E26F38654
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

80816

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Tiktok.pdb

shell32

ShellExecuteW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

kernel32

QueryPerformanceCounter SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry GetProcessHeap HeapFree HeapReAlloc CloseHandle lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex GetLastError WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetConsoleMode GetModuleHandleA GetModuleHandleW HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP GetCurrentThreadId RtlCaptureContext

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

__current_exception __C_specific_handler __current_exception_context memmove memset __CxxFrameHandler3 memcpy _CxxThrowException memcmp

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv terminate _get_initial_narrow_environment _initterm _initterm_e _crt_atexit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment exit _register_onexit_function _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_ff9f56c68c421b50abfa9de79fa2f87a_akira_cobalt-strike_rusty-stealer_satacom

shell32

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic