2026-08-10_2c0cc4642276162325021a742e47b583_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_2c0cc4642276162325021a742e47b583_akira_cobalt-strike_rusty-stealer_satacom
Size 246KB
Sample260810-msghja1zev
SHA256 77f9c10d64acd6b4acfec97a1d3359f6f31c0285d572e07642d616a5d5309017
MD5 2c0cc4642276162325021a742e47b583
SHA1 da72413a6b974539498d10a389ba111bd0101527
SHA512 2266bdfbca1bc6ebdbb4e1ce171f83ea92072584ddc3edfab923f9eb10605fbf32b6264b8cfaede29a674ebb0b285876582457e0bf00aac29e8a452aaff87125
SSDEEP 3072:4krQQ8fmV9DIhivfzGT3EHAWdgRx1QSG1By4nnJ+oYLe6FD0qM6Glo7gghJ:4k8Q8fS9DBvyT3sViZG1UBjF97Th
TLSH
T178345C16B79598E9D56BC0388252CB12B921F4840F31E7FB62D1433E2E66DF8AE3D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_2c0cc4642276162325021a742e47b583_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-10_2c0cc4642276162325021a742e47b583_akira_cobalt-strike_rusty-stealer_satacom

.exe 246KB

2026-08-10_2c0cc4642276162325021a742e47b583_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH dd1d61635d2f0ae1815f2716ef713e7e
SHA256 77f9c10d64acd6b4acfec97a1d3359f6f31c0285d572e07642d616a5d5309017
MD5 2c0cc4642276162325021a742e47b583
SHA1 da72413a6b974539498d10a389ba111bd0101527
SHA512 2266bdfbca1bc6ebdbb4e1ce171f83ea92072584ddc3edfab923f9eb10605fbf32b6264b8cfaede29a674ebb0b285876582457e0bf00aac29e8a452aaff87125
SSDEEP 3072:4krQQ8fmV9DIhivfzGT3EHAWdgRx1QSG1By4nnJ+oYLe6FD0qM6Glo7gghJ:4k8Q8fS9DBvyT3sViZG1UBjF97Th
TLSH
T178345C16B79598E9D56BC0388252CB12B921F4840F31E7FB62D1433E2E66DF8AE3D354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

154608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

jsmindump.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetLastError CloseHandle WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc ReadConsoleW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW GetModuleHandleA

ntdll

NtWriteFile NtReadFile RtlNtStatusToDosError

vcruntime140

memcpy memcmp __current_exception __C_specific_handler __CxxFrameHandler3 __current_exception_context memset _CxxThrowException memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit terminate _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_2c0cc4642276162325021a742e47b583_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic