2026-08-08_4ac5722c2fbef09c5449089d8f4b372a_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_4ac5722c2fbef09c5449089d8f4b372a_akira_cobalt-strike_rusty-stealer_satacom
Size 371KB
Sample260809-alfansxblc
SHA256 9ef738284309e61f978e27385df34b4f99a025101de6eae5c31f20040978dc50
MD5 4ac5722c2fbef09c5449089d8f4b372a
SHA1 a53f1da8dfdb1f44084e701f7cde1c523c2b0cb6
SHA512 5604320f306c23508d064b3be0b0f29ace399c276474daf59fb9182c8d0fbd25528843068fc6fa4d065f482f1a74adc43bfd96f89a3472aeae950484ff1edba1
SSDEEP 6144:K8+mM3oAVd5cbhtYkO2HAsRaJ9FUUr4XdmeibLADbpO33aTleRnjTSrH7RV:KtmM35Mgkkss5YztYac6z7RV
TLSH
T184845B13EA9959E9D08AC4748315C673A536BCCA0B31B4FF17E466243F69EE1AB3C704
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_4ac5722c2fbef09c5449089d8f4b372a_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-08_4ac5722c2fbef09c5449089d8f4b372a_akira_cobalt-strike_rusty-stealer_satacom

.exe 371KB

2026-08-08_4ac5722c2fbef09c5449089d8f4b372a_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH b2d114fc0658bc7106fa715121108e7e
SHA256 9ef738284309e61f978e27385df34b4f99a025101de6eae5c31f20040978dc50
MD5 4ac5722c2fbef09c5449089d8f4b372a
SHA1 a53f1da8dfdb1f44084e701f7cde1c523c2b0cb6
SHA512 5604320f306c23508d064b3be0b0f29ace399c276474daf59fb9182c8d0fbd25528843068fc6fa4d065f482f1a74adc43bfd96f89a3472aeae950484ff1edba1
SSDEEP 6144:K8+mM3oAVd5cbhtYkO2HAsRaJ9FUUr4XdmeibLADbpO33aTleRnjTSrH7RV:KtmM35Mgkkss5YztYac6z7RV
TLSH
T184845B13EA9959E9D08AC4748315C673A536BCCA0B31B4FF17E466243F69EE1AB3C704
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

256592

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

freemusic_client.pdb

gdi32

StretchDIBits SelectObject Ellipse SetTextColor DeleteObject CreateFontW CreateSolidBrush SetBkMode

comctl32

DefSubclassProc ImageList_Create SetWindowSubclass InitCommonControlsEx ImageList_Destroy

user32

AppendMenuW SetTimer DispatchMessageW TranslateMessage GetMessageW DestroyWindow GetMonitorInfoW MonitorFromRect GetDpiForSystem RegisterWindowMessageW RegisterClassW GetSysColorBrush GetClientRect SendMessageW LoadCursorW MessageBoxW SendMessageTimeoutW ShowWindow CreateWindowExW FindWindowW GetDpiForWindow GetSystemMetricsForDpi GetCursorPos PostMessageW EnableWindow SetFocus GetSysColor FrameRect DrawTextW FillRect SystemParametersInfoW SetWindowTextW MoveWindow FlashWindowEx UpdateWindow ReleaseDC GetDC IsWindowVisible TrackMouseEvent GetWindowLongPtrW SetWindowPos ReleaseCapture SetWindowLongPtrW PostQuitMessage GetWindowTextW GetWindowTextLengthW DestroyMenu TrackPopupMenu SetForegroundWindow BeginPaint InvalidateRect SetCapture EndPaint LoadIconW DefWindowProcW CreatePopupMenu KillTimer

shell32

Shell_NotifyIconW SHCreateItemFromParsingName ShellExecuteW

mfplat

MFShutdown MFStartup

kernel32

GetCurrentProcessId CloseHandle CreateMutexW GetLastError GetModuleHandleW SetThreadStackGuarantee GetCurrentThread SetProcessMitigationPolicy GetCurrentThreadId SetLastError GetCurrentProcess WaitForSingleObjectEx LoadLibraryA GetProcAddress CreateMutexA ReleaseMutex OpenProcess WaitForSingleObject SleepEx CreateThread MoveFileExW GetFullPathNameW CreateFileW SetFileTime SetFileInformationByHandle FindFirstFileExW FindClose GetFileInformationByHandle GetFileInformationByHandleEx FlushFileBuffers CreateDirectoryW CreateProcessW GetFileAttributesW GetModuleFileNameW DuplicateHandle GetTempPathW DeleteFileW CopyFileExW CreateWaitableTimerExW SetWaitableTimer Sleep SetFilePointerEx FormatMessageW HeapAlloc LoadLibraryExA HeapFree GetProcessHeap GetModuleHandleA SetUnhandledExceptionFilter GetCommandLineW InitializeSListHead GetSystemTimeAsFileTime AddVectoredExceptionHandler HeapReAlloc GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry lstrlenW WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW GetEnvironmentVariableW ReadFileEx WriteFileEx QueryPerformanceFrequency QueryPerformanceCounter GetSystemTimePreciseAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW

mfplay

MFPCreateMediaPlayer

advapi32

RegCreateKeyExW RegGetValueW RegSetValueExW RegCloseKey

winhttp

WinHttpQueryOption WinHttpReadData WinHttpCloseHandle WinHttpSendRequest WinHttpSetOption WinHttpSetTimeouts WinHttpQueryHeaders WinHttpReceiveResponse WinHttpQueryDataAvailable WinHttpConnect WinHttpOpenRequest WinHttpOpen

crypt32

CertFreeCertificateContext CryptHashPublicKeyInfo

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

dwmapi

DwmSetWindowAttribute DwmGetColorizationColor

ole32

PropVariantClear CoCreateInstance CoInitializeEx CoUninitialize

combase

CoTaskMemFree CoCreateFreeThreadedMarshaler

uxtheme

SetWindowTheme

ntdll

RtlNtStatusToDosError NtCreateNamedPipeFile NtOpenFile NtReadFile NtWriteFile

oleaut32

GetErrorInfo SysFreeString SysStringLen

vcruntime140

memcmp memcpy memmove __current_exception_context __CxxFrameHandler3 memset __C_specific_handler __current_exception

api-ms-win-crt-math-l1-1-0

round __setusermatherr roundf

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _initterm_e exit _initialize_onexit_table _set_app_type _register_onexit_function _exit _configure_narrow_argv terminate __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _initterm _get_initial_narrow_environment _initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_4ac5722c2fbef09c5449089d8f4b372a_akira_cobalt-strike_rusty-stealer_satacom

gdi32

comctl32

user32

shell32

mfplat

kernel32

mfplay

advapi32

winhttp

crypt32

api-ms-win-core-synch-l1-2-0

dwmapi

ole32

combase

uxtheme

ntdll

oleaut32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic