2026-08-10_13f0c8de86b4f11494f77873ce65ac44_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_13f0c8de86b4f11494f77873ce65ac44_akira_cobalt-strike_rusty-stealer_satacom
Size 149KB
Sample260810-mxevhaxbng
SHA256 e95b7734078c8c6fbf80a2b2750405db80699eac283355812b0b757f2863f48c
MD5 13f0c8de86b4f11494f77873ce65ac44
SHA1 8c9549eaf2ceccadcb2bcc74b36220f75d14febb
SHA512 ccb79ccf4bff36df8156b535feccae19c0c6704d5e9f2d2ef5dbc53ef94f2c256d36bfc79c0e583d2d32f506f64ce87acdfb1fc9bd5fff3c50aa3f03eac07b68
SSDEEP 3072:FcLEDvGMIMjPWGy6txgYpn3vU5Yy68gd:yLCvGlMDPLx1IYp8g
TLSH
T132E37B23B751A0FDD41AC034822546A7B67270D90F226AFF1395463C2FA9EE66F3C764
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_13f0c8de86b4f11494f77873ce65ac44_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-10_13f0c8de86b4f11494f77873ce65ac44_akira_cobalt-strike_rusty-stealer_satacom

.exe 149KB

2026-08-10_13f0c8de86b4f11494f77873ce65ac44_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 31b1ac9c70010553f5270798c80435ab
SHA256 e95b7734078c8c6fbf80a2b2750405db80699eac283355812b0b757f2863f48c
MD5 13f0c8de86b4f11494f77873ce65ac44
SHA1 8c9549eaf2ceccadcb2bcc74b36220f75d14febb
SHA512 ccb79ccf4bff36df8156b535feccae19c0c6704d5e9f2d2ef5dbc53ef94f2c256d36bfc79c0e583d2d32f506f64ce87acdfb1fc9bd5fff3c50aa3f03eac07b68
SSDEEP 3072:FcLEDvGMIMjPWGy6txgYpn3vU5Yy68gd:yLCvGlMDPLx1IYp8g
TLSH
T132E37B23B751A0FDD41AC034822546A7B67270D90F226AFF1395463C2FA9EE66F3C764
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

101008

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-a910ad1d695a9740.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetLastError CloseHandle WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW GetModuleHandleA

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp memcpy __current_exception __C_specific_handler __CxxFrameHandler3 __current_exception_context memset _CxxThrowException memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit terminate _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_13f0c8de86b4f11494f77873ce65ac44_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic