2026-08-11_45d16ec0c9c09c29af68ce1931415ecb_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-11_45d16ec0c9c09c29af68ce1931415ecb_akira_rusty-stealer
Size 88.4MB
Sample260811-dvtffafj4w
SHA256 1cf53a9006739b4f710b692db030f80f2da5ca0eb69315b9f28db27ee4566b16
MD5 45d16ec0c9c09c29af68ce1931415ecb
SHA1 051d12abb2417a47e60d56e84cac298ab334ff19
SHA512 05cde292f7727cdc88ec581c2307a9acf0364db4f0c32f3010448e7f620b2e7b6c7413b1bc1955b884dddeab9d6ddc552d0cb18acad5cbf1a64d715fbf2fbfc6
SSDEEP 1572864:vJGs/a7bcQNgAoIMaFy7Z8DlqXdWBqiFX9fmOIR3CXiIDwEZTZgU4:hi7bmtIy7ZMlqXdWBqq4O0CDwQNg9
TLSH
T1B5183309A9914D7ADEA9E6340A41111FBD3170CC6BF6C66F0B580F7F79AC5E1B3B8224
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-11_45d16ec0c9c09c29af68ce1931415ecb_akira_rusty-stealer

File Explorer

2026-08-11_45d16ec0c9c09c29af68ce1931415ecb_akira_rusty-stealer

.exe 88.4MB

2026-08-11_45d16ec0c9c09c29af68ce1931415ecb_akira_rusty-stealer

IMPHASH e35376db5f43840ae50e28c6e85ab345
SHA256 1cf53a9006739b4f710b692db030f80f2da5ca0eb69315b9f28db27ee4566b16
MD5 45d16ec0c9c09c29af68ce1931415ecb
SHA1 051d12abb2417a47e60d56e84cac298ab334ff19
SHA512 05cde292f7727cdc88ec581c2307a9acf0364db4f0c32f3010448e7f620b2e7b6c7413b1bc1955b884dddeab9d6ddc552d0cb18acad5cbf1a64d715fbf2fbfc6
SSDEEP 1572864:vJGs/a7bcQNgAoIMaFy7Z8DlqXdWBqiFX9fmOIR3CXiIDwEZTZgU4:hi7bmtIy7ZMlqXdWBqq4O0CDwQNg9
TLSH
T1B5183309A9914D7ADEA9E6340A41111FBD3170CC6BF6C66F0B580F7F79AC5E1B3B8224
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

41:cf:15:ff:ef:41:14:ef:81:af:91:0b:ff:fb:17:c4:3a:8d:0d:06

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Protecto.NET Software

Chains

Aug 6, 2026

CN=Protecto.NET Software

Minor OS version

Major OS version

Entry point

127804

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

stub.pdb

user32

GetSystemMetrics IsWindowVisible GetForegroundWindow GetWindowLongW SetForegroundWindow GetDesktopWindow

advapi32

GetUserNameW RegCloseKey

kernel32

SetUnhandledExceptionFilter Sleep IsDebuggerPresent IsProcessorFeaturePresent InitializeSListHead UnhandledExceptionFilter GetModuleHandleW GetProcessHeap HeapFree HeapReAlloc GetCurrentThreadId GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW GetModuleFileNameW lstrlenW ExitProcess GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA CloseHandle ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleMode GetConsoleOutputCP WaitForSingleObject GetModuleHandleA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetTickCount64 GetSystemTimeAsFileTime GetStartupInfoW GetSystemDirectoryW GetComputerNameW GetVersionExW GetLogicalDrives QueryPerformanceCounter

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ntdll

RtlNtStatusToDosError NtQueryInformationProcess NtWriteFile

vcruntime140

__current_exception __current_exception_context memcpy memset __CxxFrameHandler3 memcmp memmove __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_initterm_e _exit _initterm __p___argc exit _cexit _c_exit _register_thread_local_exe_atexit_callback _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _initialize_onexit_table _register_onexit_function _crt_atexit terminate _set_app_type _seh_filter_exe __p___argv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-11_45d16ec0c9c09c29af68ce1931415ecb_akira_rusty-stealer

PE Signature issue

user32

advapi32

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic