2026-08-08_03ddd162de41c12e25e7945da0544b47_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_03ddd162de41c12e25e7945da0544b47_akira_cobalt-strike_rusty-stealer_satacom
Size 5.9MB
Sample260808-hfpk6acc49
SHA256 8b24ada5391ebc68e353dc29c10707ac7b841c39354623335d156ef9d6f59f82
MD5 03ddd162de41c12e25e7945da0544b47
SHA1 ab0c74cd89367cac50198f2ea4074bcf87d5abda
SHA512 6e5fe6a1290534ff0643fb1985ff5e6cd0e0d493e22a30af681e812d1b63f43478174d6c1dc844eedf3a7737cd62c6575164f515beba39a11d190778cb9d60da
SSDEEP 49152:AwR2lv7HNj4Cp4CQymC270+C2Sucj7n148sVW/Lnz8P9pfhO8Z5wqv36HjvkqMmN:fejtvmC270eSZTz8HfoSbRC
TLSH
T19D564B46F65B94ACD05AC47083065A33AA3138CE17356DFF03D486392FA9BE45B3DB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_03ddd162de41c12e25e7945da0544b47_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-08_03ddd162de41c12e25e7945da0544b47_akira_cobalt-strike_rusty-stealer_satacom

.exe 5.9MB

2026-08-08_03ddd162de41c12e25e7945da0544b47_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 3847137eefc7f0775750953141c17274
SHA256 8b24ada5391ebc68e353dc29c10707ac7b841c39354623335d156ef9d6f59f82
MD5 03ddd162de41c12e25e7945da0544b47
SHA1 ab0c74cd89367cac50198f2ea4074bcf87d5abda
SHA512 6e5fe6a1290534ff0643fb1985ff5e6cd0e0d493e22a30af681e812d1b63f43478174d6c1dc844eedf3a7737cd62c6575164f515beba39a11d190778cb9d60da
SSDEEP 49152:AwR2lv7HNj4Cp4CQymC270+C2Sucj7n148sVW/Lnz8P9pfhO8Z5wqv36HjvkqMmN:fejtvmC270eSZTz8HfoSbRC
TLSH
T19D564B46F65B94ACD05AC47083065A33AA3138CE17356DFF03D486392FA9BE45B3DB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4956320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gog_cli.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime CloseHandle GetSystemInfo UnmapViewOfFile VirtualProtect CreateFileMappingW MapViewOfFile GetCurrentProcess DuplicateHandle GetLastError WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetFileInformationByHandle GetFileInformationByHandleEx GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW FindFirstFileExW FindClose ExitProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex GetFinalPathNameByHandleW HeapAlloc GetModuleFileNameW ReadConsoleW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW GetModuleHandleA FindNextFileW

ntdll

NtWriteFile RtlNtStatusToDosError NtReadFile

vcruntime140

__current_exception_context memset __current_exception __C_specific_handler _CxxThrowException memmove memcpy memcmp __CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

roundf round powf floorf cosf ceilf sinf floor ceil pow truncf sin cos log2 fmodf atan2f atan2 _hypotf tanf tan fmod log acos acosf __setusermatherr trunc asin exp log10

api-ms-win-crt-runtime-l1-1-0

_set_app_type terminate _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc __p___argv _seh_filter_exe _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _register_onexit_function _initialize_onexit_table _cexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_03ddd162de41c12e25e7945da0544b47_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic