2026-08-10_5caad6c2e3fc92cd5d3269a9c6c1f8b3_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_5caad6c2e3fc92cd5d3269a9c6c1f8b3_akira_rusty-stealer
Size 7.7MB
Sample260810-ff1mbawses
SHA256 91dba7f24f89586b04bc54963ac05295690fdc619a20814240f62fb53b4ecab6
MD5 5caad6c2e3fc92cd5d3269a9c6c1f8b3
SHA1 425cf13248fe21e13be7c616b9b7fb008e47fce5
SHA512 0002627506e278295e929bc72508fd97250b4bbce1364b8f710eb2aededaec57e67c49da665ab198e13bbd32ae3393a79283e6343532c432a450160256811a56
SSDEEP 98304:JVhmKWOswrM3GYxMrzn+AkJxSwkDVPy/8OYZjbyg1pTUC5It1+K/W:JVhmKn/bznASwRUBu+pDYEK
TLSH
T1F586E711BA5B995CD18BC8B083878A634D2130DB1A35B9BF5498563C2FBEBF45F38319
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_5caad6c2e3fc92cd5d3269a9c6c1f8b3_akira_rusty-stealer

File Explorer

2026-08-10_5caad6c2e3fc92cd5d3269a9c6c1f8b3_akira_rusty-stealer

.exe 7.7MB

2026-08-10_5caad6c2e3fc92cd5d3269a9c6c1f8b3_akira_rusty-stealer

IMPHASH 90cef61c473c3c75711696b87089c74a
SHA256 91dba7f24f89586b04bc54963ac05295690fdc619a20814240f62fb53b4ecab6
MD5 5caad6c2e3fc92cd5d3269a9c6c1f8b3
SHA1 425cf13248fe21e13be7c616b9b7fb008e47fce5
SHA512 0002627506e278295e929bc72508fd97250b4bbce1364b8f710eb2aededaec57e67c49da665ab198e13bbd32ae3393a79283e6343532c432a450160256811a56
SSDEEP 98304:JVhmKWOswrM3GYxMrzn+AkJxSwkDVPy/8OYZjbyg1pTUC5It1+K/W:JVhmKn/bznASwRUBu+pDYEK
TLSH
T1F586E711BA5B995CD18BC8B083878A634D2130DB1A35B9BF5498563C2FBEBF45F38319
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5518416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

fox_checker.pdb

bcryptprimitives

ProcessPrng

advapi32

RegOpenKeyExW RegGetValueW RegQueryValueExW RegCloseKey EventUnregister EventRegister EventSetInformation EventWriteTransfer

ntdll

NtCreateNamedPipeFile NtWriteFile RtlGetVersion RtlNtStatusToDosError NtOpenFile

kernel32

IsDebuggerPresent GetSystemTimeAsFileTime SleepConditionVariableSRW WakeAllConditionVariable EncodePointer TlsAlloc LCIDToLocaleName GetUserDefaultUILanguage TlsGetValue TlsSetValue TlsFree InitializeSListHead UnhandledExceptionFilter SetUnhandledExceptionFilter GetTempPathW SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP LoadLibraryW RaiseException WriteConsoleW MultiByteToWideChar SetEnvironmentVariableW GetFinalPathNameByHandleW ReleaseMutex CreateMutexA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess FindClose FindFirstFileExW GetModuleHandleW GetCommandLineW GetCurrentDirectoryW LoadLibraryA SetThreadStackGuarantee AddVectoredExceptionHandler RtlPcToFileHeader CreateDirectoryW GetStdHandle GetEnvironmentStringsW TerminateProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx GetSystemTimePreciseAsFileTime RtlVirtualUnwind lstrlenW AcquireSRWLockExclusive RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcessHeap HeapFree LoadLibraryExW RtlUnwindEx FreeLibrary GetCurrentProcess ReadFileEx GetCurrentProcessId CreateThread QueryPerformanceCounter QueryPerformanceFrequency HeapReAlloc SetFileTime SetFileInformationByHandle GetFullPathNameW SetLastError SleepEx WriteFileEx WaitForSingleObject FreeEnvironmentStringsW CompareStringOrdinal GetEnvironmentVariableW GetModuleHandleA ReleaseSRWLockExclusive GetCurrentThreadId Sleep GetProcAddress IsProcessorFeaturePresent CloseHandle CreateFileW LoadLibraryExA DeleteCriticalSection HeapAlloc FormatMessageW GetCurrentThread GetConsoleMode FindNextFileW GetFileAttributesW GetFileInformationByHandle InitializeCriticalSectionAndSpinCount

user32

DrawTextW GetWindowDC GetSystemMetrics OffsetRect RegisterTouchWindow GetMenuBarInfo TrackPopupMenu PostQuitMessage SetMenu CreateAcceleratorTableW DestroyAcceleratorTable AppendMenuW InsertMenuW CheckMenuItem RegisterClassExW GetMessageW SetMenuItemInfoW DispatchMessageW DrawMenuBar DrawIconEx CreatePopupMenu CreateMenu RemoveMenu GetMenuItemInfoW VkKeyScanW RegisterRawInputDevices PostMessageW DestroyWindow SetPropW SystemParametersInfoA SendInput SetForegroundWindow GetMenu IsWindowVisible SetCapture MsgWaitForMultipleObjectsEx IsWindow EnumDisplayMonitors MonitorFromPoint ClipCursor GetClipCursor ShowCursor SetWindowLongW EnableMenuItem DestroyMenu RedrawWindow CreateWindowExW DestroyIcon CreateIcon SetWindowTextW GetWindowTextW GetWindowTextLengthW SetWindowDisplayAffinity ReleaseCapture GetKeyboardLayout ToUnicodeEx PeekMessageW PostThreadMessageW MapVirtualKeyExW GetKeyState GetSystemMenu GetAsyncKeyState GetKeyboardState GetRawInputData DefWindowProcW ValidateRect AdjustWindowRect SetWindowPos RegisterWindowMessageA SetParent GetMessageA TranslateMessage GetWindow MapWindowPoints SetFocus ShowWindow EnableWindow IsWindowEnabled DispatchMessageA ReleaseDC GetDC IsProcessDPIAware GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn EnumChildWindows IsIconic SendMessageW GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos MapVirtualKeyW TranslateAcceleratorW FlashWindowEx InvalidateRgn GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW SetCursor LoadCursorW GetMonitorInfoW MonitorFromRect MonitorFromWindow GetCursorPos CloseTouchInputHandle GetTouchInputInfo ClientToScreen GetWindowLongW TrackMouseEvent SystemParametersInfoW FillRect GetClientRect ScreenToClient AdjustWindowRectEx GetUpdateRect

ole32

CoInitializeEx OleInitialize RegisterDragDrop RevokeDragDrop CoCreateFreeThreadedMarshaler CoTaskMemFree CoUninitialize CoTaskMemAlloc CoCreateInstance

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

gdi32

CombineRgn CreateSolidBrush CreateDIBSection SetBkMode CreateCompatibleDC DeleteDC DeleteObject SelectObject SetTextColor CreateRectRgn GetDeviceCaps BitBlt

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute

comctl32

RemoveWindowSubclass DefSubclassProc SetWindowSubclass TaskDialogIndirect

shlwapi

SHCreateMemStream

shell32

SHGetKnownFolderPath ShellExecuteW DragQueryFileW DragFinish SHAppBarMessage

oleaut32

SysStringLen SetErrorInfo SysFreeString GetErrorInfo

api-ms-win-crt-math-l1-1-0

round roundf __setusermatherr pow floor trunc

api-ms-win-crt-string-l1-1-0

wcsncmp strlen strcmp strcpy_s wcscmp wcslen _wcsicmp

api-ms-win-crt-convert-l1-1-0

wcstol _ultow_s _wtoi

api-ms-win-crt-runtime-l1-1-0

_initterm_e exit _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _exit _initialize_onexit_table _register_onexit_function _set_app_type _initterm _crt_atexit __p___argc _seh_filter_exe terminate _c_exit _register_thread_local_exe_atexit_callback _cexit abort __p___argv

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free _callnewh malloc calloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_5caad6c2e3fc92cd5d3269a9c6c1f8b3_akira_rusty-stealer

bcryptprimitives

advapi32

ntdll

kernel32

user32

ole32

api-ms-win-core-synch-l1-2-0

gdi32

dwmapi

comctl32

shlwapi

shell32

oleaut32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic