2026-08-09_66fabb9ee913950bdde2452eb55a2719_akira_cobalt-strike_megazord_rusty-stealer_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_66fabb9ee913950bdde2452eb55a2719_akira_cobalt-strike_megazord_rusty-stealer_satacom_vidar
Size 11.0MB
Sample260809-jnvmtabp3w
SHA256 0306f4ee5039bddae624578c917ab44123365a64edbf760177ae6d62712dcbae
MD5 66fabb9ee913950bdde2452eb55a2719
SHA1 dfb82a5ce91d3813e5fc27ff728b761158f1b355
SHA512 39c0785cd89f51b17cd3ea1f526253a787b2707017eebf5eb4b61cbc7925ce0f2b7a045ac510bf319eb3f6a6922a9f46b8dcd45e452d5da8963866d610503fa0
SSDEEP 196608:RK1p8+UoDxZh6ovNOYwaM6X6M3GcmhfaMF6wtgG:Y83GZ7cMuM3WhxPp
TLSH
T179C6CE43F26290FCC56AC175D35A6232BA327C49473139EB5BA04B213E65FE07B3AB54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_66fabb9ee913950bdde2452eb55a2719_akira_cobalt-strike_megazord_rusty-stealer_satacom_vidar

File Explorer

2026-08-09_66fabb9ee913950bdde2452eb55a2719_akira_cobalt-strike_megazord_rusty-stealer_satacom_vidar

.exe 11.0MB

2026-08-09_66fabb9ee913950bdde2452eb55a2719_akira_cobalt-strike_megazord_rusty-stealer_satacom_vidar

IMPHASH 71d7880f89f311eb002763b8d16fa9cc
SHA256 0306f4ee5039bddae624578c917ab44123365a64edbf760177ae6d62712dcbae
MD5 66fabb9ee913950bdde2452eb55a2719
SHA1 dfb82a5ce91d3813e5fc27ff728b761158f1b355
SHA512 39c0785cd89f51b17cd3ea1f526253a787b2707017eebf5eb4b61cbc7925ce0f2b7a045ac510bf319eb3f6a6922a9f46b8dcd45e452d5da8963866d610503fa0
SSDEEP 196608:RK1p8+UoDxZh6ovNOYwaM6X6M3GcmhfaMF6wtgG:Y83GZ7cMuM3WhxPp
TLSH
T179C6CE43F26290FCC56AC175D35A6232BA327C49473139EB5BA04B213E65FE07B3AB54
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4050672

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Owlin.pdb

kernel32

GetCurrentProcess WideCharToMultiByte MultiByteToWideChar TlsSetValue SleepEx FormatMessageW ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW GetModuleFileNameW DuplicateHandle TlsFree TryAcquireSRWLockExclusive GetExitCodeThread GetCurrentThreadId LoadLibraryW SetLastError InitializeConditionVariable WakeConditionVariable lstrlenW IsDebuggerPresent LoadLibraryA GetSystemInfo RtlLookupFunctionEntry ReleaseMutex TlsGetValue TlsAlloc LCIDToLocaleName GetCurrentProcessId GetSystemTimePreciseAsFileTime LoadLibraryExA GetExitCodeProcess OpenProcess ReadProcessMemory WriteProcessMemory ResumeThread VirtualFreeEx VirtualQueryEx EncodePointer GetProcessId OpenThread SuspendThread VirtualProtectEx FlushInstructionCache GetSystemFirmwareTable OutputDebugStringA OutputDebugStringW LoadLibraryExW FreeLibrary SleepConditionVariableSRW GetModuleHandleW WaitForSingleObjectEx RaiseException SwitchToThread CreateWaitableTimerExW GetQueuedCompletionStatusEx CreateThread FindFirstFileExW FindNextFileW FindClose CreateMutexW CreateMutexA GetStdHandle GetConsoleMode GetConsoleOutputCP WriteConsoleW ReadFileEx WriteFileEx GetFullPathNameW CreateFileW SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW CreateProcessW GetFileAttributesW GetTempPathW GetFinalPathNameByHandleW PostQueuedCompletionStatus CreateIoCompletionPort CreateRemoteThread GetFileSizeEx ReadFile WriteFile FlushFileBuffers DeleteFileW MoveFileExW WakeAllConditionVariable AcquireSRWLockExclusive RtlPcToFileHeader TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime ReleaseSRWLockExclusive WaitForSingleObject SetWaitableTimer HeapReAlloc GetCurrentThread SetThreadStackGuarantee GetModuleHandleA GetProcAddress GetLastError Sleep VirtualAllocEx HeapAlloc CloseHandle HeapFree GetUserDefaultUILanguage GetProcessHeap GetEnvironmentStringsW SetUnhandledExceptionFilter RtlUnwindEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx AddVectoredExceptionHandler QueryPerformanceCounter QueryPerformanceFrequency SetEnvironmentVariableW GetEnvironmentVariableW RtlCaptureContext RtlVirtualUnwind Thread32Next Thread32First Module32NextW Module32FirstW GetThreadContext Process32NextW Process32FirstW CreateToolhelp32Snapshot GetCommandLineW GetCurrentDirectoryW InitializeSListHead FreeEnvironmentStringsW UnhandledExceptionFilter

advapi32

EventWriteTransfer RegGetValueW RegSetValueExW RegCloseKey RegCreateKeyTransactedW RegCreateKeyExW RegOpenKeyTransactedW RegDeleteTreeW RegOpenKeyExW RegQueryValueExW EventSetInformation EventRegister EventUnregister

bcryptprimitives

ProcessPrng

ntdll

NtDeviceIoControlFile NtCancelIoFileEx NtWriteFile NtOpenFile RtlGetVersion RtlNtStatusToDosError NtReadFile NtCreateNamedPipeFile

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

comctl32

TaskDialogIndirect RemoveWindowSubclass DefSubclassProc SetWindowSubclass

user32

GetClipCursor ShowCursor MapVirtualKeyExW ToUnicodeEx GetMenu RegisterWindowMessageA FindWindowW ClipCursor SetWindowLongW GetSystemMenu GetUpdateRect ValidateRect GetRawInputData GetKeyState EnumChildWindows DispatchMessageA GetMessageA GetWindowTextLengthW AdjustWindowRect GetWindowTextW SetWindowTextW TranslateAcceleratorW CloseTouchInputHandle GetTouchInputInfo DestroyWindow TrackMouseEvent SetCapture SystemParametersInfoW ReleaseCapture MonitorFromRect GetWindowLongW ScreenToClient GetKeyboardLayout DefWindowProcW SetWindowLongPtrW SetCursor LoadCursorW GetWindowPlacement SetWindowPlacement GetMonitorInfoW ChangeDisplaySettingsExW UpdateWindow InvalidateRect GetKeyboardState SetCursorPos GetForegroundWindow InvalidateRgn SetPropW FlashWindowEx FindWindowExW GetParent SetWindowDisplayAffinity MapVirtualKeyW SetWindowRgn RegisterTouchWindow GetSystemMetrics IsWindow CreateWindowExW AdjustWindowRectEx RegisterClassExW IsWindowEnabled EnableWindow MonitorFromPoint GetWindowLongPtrW EnumDisplayMonitors IsIconic IsWindowVisible RegisterRawInputDevices RedrawWindow MsgWaitForMultipleObjectsEx TranslateMessage PeekMessageW GetMessageW DispatchMessageW PostThreadMessageW GetAsyncKeyState IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos EnableMenuItem VkKeyScanW SendInput CheckMenuItem DrawTextW GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo FillRect GetMenuItemInfoW ShowWindow SendMessageW PostQuitMessage PostMessageW GetActiveWindow SystemParametersInfoA SetMenu RemoveMenu DrawIconEx ReleaseDC GetDC AppendMenuW InsertMenuW CreateIcon SetMenuItemInfoW DrawMenuBar CreatePopupMenu CreateMenu CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu GetWindow SetFocus SetWindowPos SetParent

gdi32

SelectObject DeleteDC CreateDIBSection CreateRectRgn CreateCompatibleDC CreateSolidBrush SetBkMode BitBlt SetTextColor CombineRgn DeleteObject GetDeviceCaps

dwmapi

DwmGetWindowAttribute DwmEnableBlurBehindWindow DwmSetWindowAttribute

oleaut32

SetErrorInfo GetErrorInfo SysFreeString SysStringLen

ole32

CoCreateInstance CoUninitialize CoInitializeEx CoTaskMemFree CoTaskMemAlloc RevokeDragDrop CoCreateFreeThreadedMarshaler OleInitialize RegisterDragDrop

shell32

SHAppBarMessage ShellExecuteW DragQueryFileW DragFinish SHGetKnownFolderPath

shlwapi

SHCreateMemStream

bcrypt

BCryptOpenAlgorithmProvider BCryptGetProperty BCryptCloseAlgorithmProvider BCryptCreateHash BCryptGenRandom BCryptDestroyKey BCryptFinishHash BCryptDestroyHash BCryptImportKeyPair BCryptHashData BCryptVerifySignature BCryptDecrypt BCryptSetProperty BCryptGenerateSymmetricKey

winhttp

WinHttpSetTimeouts WinHttpConnect WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpOpen WinHttpReceiveResponse WinHttpCloseHandle WinHttpQueryHeaders WinHttpQueryDataAvailable WinHttpReadData WinHttpSendRequest

urlmon

URLDownloadToFileW

api-ms-win-crt-math-l1-1-0

ceilf __setusermatherr round floor trunc roundf pow

api-ms-win-crt-string-l1-1-0

wcslen wcsncmp strcpy_s _wcsicmp isspace tolower wcscmp towlower isalnum strlen

api-ms-win-crt-runtime-l1-1-0

__p___argc _invalid_parameter_noinfo_noreturn __p___argv _beginthreadex abort _invoke_watson _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm _get_initial_narrow_environment exit _initialize_onexit_table _register_onexit_function _crt_atexit _seh_filter_exe _set_app_type _exit _configure_narrow_argv _initialize_narrow_environment terminate _initterm_e

api-ms-win-crt-stdio-l1-1-0

__p__commode __stdio_common_vsprintf _set_fmode

api-ms-win-crt-convert-l1-1-0

_wtoi wcstol _ultow_s

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc _callnewh calloc _set_new_mode free

Name

.text

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6.9MB

Virtual Size

6.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

84KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_66fabb9ee913950bdde2452eb55a2719_akira_cobalt-strike_megazord_rusty-stealer_satacom_vidar

kernel32

advapi32

bcryptprimitives

ntdll

api-ms-win-core-synch-l1-2-0

comctl32

user32

gdi32

dwmapi

oleaut32

ole32

shell32

shlwapi

bcrypt

winhttp

urlmon

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic