2026-08-10_3dac01adff735de4d6bf6d81ffcf6bed_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_3dac01adff735de4d6bf6d81ffcf6bed_akira_cobalt-strike_rusty-stealer_satacom
Size 4.6MB
Sample260810-mpgn5afp2s
SHA256 545061879ed5e67918bcdfd5914e9f4ceb7e30b1db2e7010760978f89a408411
MD5 3dac01adff735de4d6bf6d81ffcf6bed
SHA1 220610044fba94611f8634bc36a524ddd8d65aa2
SHA512 c0803e1c3b8c210d7a630cb610f2096ed15f8adc629c74e6bc4461581ff3075d9f0ffd48b867d63a4e583e409f853a6a3f9d78ceb2243a59d10693a5032e6a95
SSDEEP 49152:mVkj1SiGPbrtzRQUMq/rUJds+5E5e4zZcuTM1DW5FOyuzoo6Fl98DJ4:/kcsOyuzoo6Fl98D
TLSH
T15626E661E5395CDAD06A803482979A22A91070970F247FE7779C426E1F3DEEF5A3C36C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_3dac01adff735de4d6bf6d81ffcf6bed_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-10_3dac01adff735de4d6bf6d81ffcf6bed_akira_cobalt-strike_rusty-stealer_satacom

.exe 4.6MB

2026-08-10_3dac01adff735de4d6bf6d81ffcf6bed_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 2a354fc84ffc4472a5af47b49e2adc9c
SHA256 545061879ed5e67918bcdfd5914e9f4ceb7e30b1db2e7010760978f89a408411
MD5 3dac01adff735de4d6bf6d81ffcf6bed
SHA1 220610044fba94611f8634bc36a524ddd8d65aa2
SHA512 c0803e1c3b8c210d7a630cb610f2096ed15f8adc629c74e6bc4461581ff3075d9f0ffd48b867d63a4e583e409f853a6a3f9d78ceb2243a59d10693a5032e6a95
SSDEEP 49152:mVkj1SiGPbrtzRQUMq/rUJds+5E5e4zZcuTM1DW5FOyuzoo6Fl98DJ4:/kcsOyuzoo6Fl98D
TLSH
T15626E661E5395CDAD06A803482979A22A91070970F247FE7779C426E1F3DEEF5A3C36C
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1832256

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

render.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetLastError CloseHandle WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc GetModuleFileNameW ReadConsoleW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW GetModuleHandleA

ntdll

NtWriteFile NtReadFile RtlNtStatusToDosError

vcruntime140

__current_exception_context _CxxThrowException memset memmove memcpy __C_specific_handler __current_exception memcmp __CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

fmod log cos exp sin tan acos asin atan ceil pow floor trunc log10 round __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_set_app_type _crt_atexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe terminate _register_onexit_function _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_3dac01adff735de4d6bf6d81ffcf6bed_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic