2026-08-10_febce49ab0e7d45f61572d9f242ad1f2_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_febce49ab0e7d45f61572d9f242ad1f2_akira_cobalt-strike_rusty-stealer_satacom
Size 3.0MB
Sample260810-laytesel81
SHA256 132f6dd8092da175c204cdbb776c35c6685e30f46247b2032e4ec233d2114326
MD5 febce49ab0e7d45f61572d9f242ad1f2
SHA1 60db0d9ab7c9082455683d2381398a762e3613d4
SHA512 85a14c7e2890024ec6cdfa4d2190fd28f50aa3b149ebcce9ba1e1600dd2bb5126dd0b431255309c691f5b140cef95a4e8ed7ace4748cd16386f7f9a83436e85a
SSDEEP 49152:W9gj/e5CRolRQoYA/O0/IiZMB6QTylgp2LLW6i6:ACmBJ/9qTyep2LLW6i6
TLSH
T1BFE53921BB5699ECC19AC470830646726B35B0CB1B35AAFF45D486353F6AAF40F7C368
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_febce49ab0e7d45f61572d9f242ad1f2_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-10_febce49ab0e7d45f61572d9f242ad1f2_akira_cobalt-strike_rusty-stealer_satacom

.exe 3.0MB

2026-08-10_febce49ab0e7d45f61572d9f242ad1f2_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 9de8bb7e870fcfac34e0cf69d9de4781
SHA256 132f6dd8092da175c204cdbb776c35c6685e30f46247b2032e4ec233d2114326
MD5 febce49ab0e7d45f61572d9f242ad1f2
SHA1 60db0d9ab7c9082455683d2381398a762e3613d4
SHA512 85a14c7e2890024ec6cdfa4d2190fd28f50aa3b149ebcce9ba1e1600dd2bb5126dd0b431255309c691f5b140cef95a4e8ed7ace4748cd16386f7f9a83436e85a
SSDEEP 49152:W9gj/e5CRolRQoYA/O0/IiZMB6QTylgp2LLW6i6:ACmBJ/9qTyep2LLW6i6
TLSH
T1BFE53921BB5699ECC19AC470830646726B35B0CB1B35AAFF45D486353F6AAF40F7C368
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1991616

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

godharness.pdb

kernel32

GetConsoleMode SetConsoleTextAttribute GetConsoleScreenBufferInfo SetConsoleMode SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime FindNextFileW GetTempPathW GetModuleHandleA FormatMessageW GetLastError CloseHandle WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetFileInformationByHandle GetFileInformationByHandleEx GetStdHandle CreateDirectoryW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW FindFirstFileExW FindClose ExitProcess GetSystemInfo GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc GetModuleFileNameW ReadConsoleW MultiByteToWideChar WriteConsoleW GetConsoleOutputCP GetFileType GetModuleHandleW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

vcruntime140

__C_specific_handler _CxxThrowException __current_exception __current_exception_context memset memcmp memcpy memmove __CxxFrameHandler3

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _crt_atexit _seh_filter_exe _set_app_type _register_onexit_function _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit terminate __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_febce49ab0e7d45f61572d9f242ad1f2_akira_cobalt-strike_rusty-stealer_satacom

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic