2026-08-11_0c647f0ac7ecd6fa5b205c0c6bf26bb9_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-11_0c647f0ac7ecd6fa5b205c0c6bf26bb9_akira_rusty-stealer
Size 143KB
Sample260811-ege7bsvgqd
SHA256 5853fb1a7009b01c6e6d01a63113cb324adf42f50ac682d1c9169acdfc27964e
MD5 0c647f0ac7ecd6fa5b205c0c6bf26bb9
SHA1 70f987cb205fe636ecddec7e3ea504e556d60e60
SHA512 07ac69aee89308102b44b822cba057938612554ed3f3cf3e048960785932d9d1ffee7e450ba579f44f87f995168c785727df685045cd00c16f1e9481b265f230
SSDEEP 1536:pcWcOnAOMMcMu5v/NCkccFo0U+6mkwA6xOfyZJ9GJ1JM6kJ8Acl5jpA0OPdaPAZR:3Any6vlCDB0UlJ6xZZ01266rxaI7
TLSH
T1E0E37D13B72191F9D01AC03482658567B67274D90F316AFF13A943382FAAAF6AF3C354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-11_0c647f0ac7ecd6fa5b205c0c6bf26bb9_akira_rusty-stealer

File Explorer

2026-08-11_0c647f0ac7ecd6fa5b205c0c6bf26bb9_akira_rusty-stealer

.exe 143KB

2026-08-11_0c647f0ac7ecd6fa5b205c0c6bf26bb9_akira_rusty-stealer

IMPHASH fa996136ecb48937d36d919a0dbeb39f
SHA256 5853fb1a7009b01c6e6d01a63113cb324adf42f50ac682d1c9169acdfc27964e
MD5 0c647f0ac7ecd6fa5b205c0c6bf26bb9
SHA1 70f987cb205fe636ecddec7e3ea504e556d60e60
SHA512 07ac69aee89308102b44b822cba057938612554ed3f3cf3e048960785932d9d1ffee7e450ba579f44f87f995168c785727df685045cd00c16f1e9481b265f230
SSDEEP 1536:pcWcOnAOMMcMu5v/NCkccFo0U+6mkwA6xOfyZJ9GJ1JM6kJ8Acl5jpA0OPdaPAZR:3Any6vlCDB0UlJ6xZZ01266rxaI7
TLSH
T1E0E37D13B72191F9D01AC03482658567B67274D90F316AFF13A943382FAAAF6AF3C354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

98848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-5cd4d223174e74cc.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetModuleHandleW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetLastError CloseHandle WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP IsProcessorFeaturePresent FormatMessageW GetModuleHandleA GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memmove __current_exception_context memcpy _CxxThrowException __C_specific_handler __current_exception memset memcmp __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _seh_filter_exe _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-11_0c647f0ac7ecd6fa5b205c0c6bf26bb9_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic