2026-08-10_f1b2fa8203074457b649ccac4bee059f_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_f1b2fa8203074457b649ccac4bee059f_akira_rusty-stealer
Size 857KB
Sample260810-a2cjqa11ax
SHA256 22c6f9ad1cba1b243a5c3ab8703754ec92dcabdd171bd07eab0e8633977fae49
MD5 f1b2fa8203074457b649ccac4bee059f
SHA1 4f29f31d6265f595f7573f227fa496484f6d9c2d
SHA512 987dba8b1714e4c686c999dc451c072acb8b28ddc57702c0ac36821d6449f20a8750eafa5155671dcba39d5e5016849fc9b92a80afdc053d767dbabe645291eb
SSDEEP 12288:GnMYt+BiS/UcJ5ZzX6CQAknAgy5JQcCuLBcL7M/yuh/tFPaBm:mMY9S/UcR6CQAKAgKQBuLBiw/7hFFF
TLSH
T13C15412632B0065DE063F17A4729EFA3C7FBF54C2331B561D9A0F562EE4AC21B5E6910
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_f1b2fa8203074457b649ccac4bee059f_akira_rusty-stealer

File Explorer

2026-08-10_f1b2fa8203074457b649ccac4bee059f_akira_rusty-stealer

.exe 857KB

2026-08-10_f1b2fa8203074457b649ccac4bee059f_akira_rusty-stealer

IMPHASH c74af9e20cb4b65554f5fae2b8f1cb1e
SHA256 22c6f9ad1cba1b243a5c3ab8703754ec92dcabdd171bd07eab0e8633977fae49
MD5 f1b2fa8203074457b649ccac4bee059f
SHA1 4f29f31d6265f595f7573f227fa496484f6d9c2d
SHA512 987dba8b1714e4c686c999dc451c072acb8b28ddc57702c0ac36821d6449f20a8750eafa5155671dcba39d5e5016849fc9b92a80afdc053d767dbabe645291eb
SSDEEP 12288:GnMYt+BiS/UcJ5ZzX6CQAknAgy5JQcCuLBcL7M/yuh/tFPaBm:mMY9S/UcR6CQAKAgKQBuLBiw/7hFFF
TLSH
T13C15412632B0065DE063F17A4729EFA3C7FBF54C2331B561D9A0F562EE4AC21B5E6910
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

804064

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

草稿2.pdb

kernel32

GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetEnvironmentVariableW GetStdHandle GetCurrentProcessId GetCurrentDirectoryW SetLastError GetProcessHeap RtlVirtualUnwind HeapReAlloc lstrlenW ReleaseMutex RtlLookupFunctionEntry GetModuleHandleW RtlCaptureContext GetModuleHandleA HeapAlloc GetConsoleMode QueryPerformanceCounter WaitForSingleObject GetConsoleOutputCP MultiByteToWideChar WriteConsoleW WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess SetThreadErrorMode FreeLibrary GetProcAddress LoadLibraryExW HeapFree GetLastError IsProcessorFeaturePresent

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

ntdll

RtlNtStatusToDosError NtWriteFile

vcruntime140

__CxxFrameHandler3 memcpy memmove memset memcmp __current_exception_context __current_exception __C_specific_handler _CxxThrowException

api-ms-win-crt-runtime-l1-1-0

exit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe _get_initial_narrow_environment _configure_narrow_argv _initialize_onexit_table _register_onexit_function _crt_atexit terminate _set_app_type _initterm _initterm_e _initialize_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_f1b2fa8203074457b649ccac4bee059f_akira_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic