2026-08-11_10a0273396e3b0bd46316b80d2cb5d1f_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-11_10a0273396e3b0bd46316b80d2cb5d1f_akira_cobalt-strike_rusty-stealer_satacom
Size 4.7MB
Sample260811-eexctsfn2s
SHA256 0dd77e466e772fd87b20923d59c04090118c88f60bc2c213f9f710b09ca45eb0
MD5 10a0273396e3b0bd46316b80d2cb5d1f
SHA1 52bc5181c8c69165965b1f3ab0be44dad12c8075
SHA512 b56c176a721daa0ddc49629b166005d1776ffeaa52947e09c3426d1db768e349774572278adb0f00e789d86443b8fb90a2bf746708d78e10835542dc6a29022c
SSDEEP 49152:3RSH5Fy1GMvI3bT7OV0dLGOnC2+zDgNKdkXONFotLR7FKc0sxuK/p8z78gjJpt2/:GCx7tt2Q43Q
TLSH
T15736E916B77950DAC1BBC07882839F22B920748D47393BF76AC5466A2F20EF46D7D364
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-11_10a0273396e3b0bd46316b80d2cb5d1f_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-11_10a0273396e3b0bd46316b80d2cb5d1f_akira_cobalt-strike_rusty-stealer_satacom

.exe 4.7MB

2026-08-11_10a0273396e3b0bd46316b80d2cb5d1f_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 3b7efaf5e7a91a11e762bb3b1d932a3e
SHA256 0dd77e466e772fd87b20923d59c04090118c88f60bc2c213f9f710b09ca45eb0
MD5 10a0273396e3b0bd46316b80d2cb5d1f
SHA1 52bc5181c8c69165965b1f3ab0be44dad12c8075
SHA512 b56c176a721daa0ddc49629b166005d1776ffeaa52947e09c3426d1db768e349774572278adb0f00e789d86443b8fb90a2bf746708d78e10835542dc6a29022c
SSDEEP 49152:3RSH5Fy1GMvI3bT7OV0dLGOnC2+zDgNKdkXONFotLR7FKc0sxuK/p8z78gjJpt2/:GCx7tt2Q43Q
TLSH
T15736E916B77950DAC1BBC07882839F22B920748D47393BF76AC5466A2F20EF46D7D364
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3482048

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

durationdump.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

FormatMessageW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetLastError CloseHandle WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetFileInformationByHandle GetFileInformationByHandleEx GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW FindFirstFileExW FindClose ExitProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc ReadConsoleW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW GetModuleHandleA FindNextFileW

ntdll

NtWriteFile NtReadFile RtlNtStatusToDosError

vcruntime140

memcpy memmove __current_exception __CxxFrameHandler3 __C_specific_handler _CxxThrowException __current_exception_context memcmp memset

api-ms-win-crt-math-l1-1-0

fmod floor trunc round __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment terminate _initterm _initterm_e exit _exit __p___argc _crt_atexit _cexit _c_exit _register_thread_local_exe_atexit_callback _get_initial_narrow_environment __p___argv _initialize_onexit_table _register_onexit_function

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-11_10a0273396e3b0bd46316b80d2cb5d1f_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic