2026-08-12_44fffad613a1b2d147c8305f42826a34_akira_icedid_megazord_rusty-stealer_ryuk

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-12_44fffad613a1b2d147c8305f42826a34_akira_icedid_megazord_rusty-stealer_ryuk
Size 24.9MB
Sample260812-e9199sv1b1
SHA256 06fb94a7ff6a5782b97daa87caad22a23a5a7eccce0d84644ccf8a029486bd83
MD5 44fffad613a1b2d147c8305f42826a34
SHA1 a1d84989dfafceb567ba5a29164d6f177f5da8b2
SHA512 a891540fa9452881e886e18540f9389e320ea0e7fa9b0d7344d340eb19e96c8a98047c16052cc93d73e618183a9b9ab9f7329c07f0bc07cf61adc08b6a5f2af2
SSDEEP 786432:4HxjSiM/IQiW6pX8YMjKFry/b4VCCso2GKCe:4HxjEiW6pfMeFrSb4VFso2Gte
TLSH
T12847BE11579FD865E24F8570C3059B219BA33CCA1A2175AAE8CC3B701BFFB656A3C709
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_44fffad613a1b2d147c8305f42826a34_akira_icedid_megazord_rusty-stealer_ryuk

File Explorer

2026-08-12_44fffad613a1b2d147c8305f42826a34_akira_icedid_megazord_rusty-stealer_ryuk

.exe 24.9MB

2026-08-12_44fffad613a1b2d147c8305f42826a34_akira_icedid_megazord_rusty-stealer_ryuk

IMPHASH b068616ec7f7c5516fb678a48ac82060
SHA256 06fb94a7ff6a5782b97daa87caad22a23a5a7eccce0d84644ccf8a029486bd83
MD5 44fffad613a1b2d147c8305f42826a34
SHA1 a1d84989dfafceb567ba5a29164d6f177f5da8b2
SHA512 a891540fa9452881e886e18540f9389e320ea0e7fa9b0d7344d340eb19e96c8a98047c16052cc93d73e618183a9b9ab9f7329c07f0bc07cf61adc08b6a5f2af2
SSDEEP 786432:4HxjSiM/IQiW6pX8YMjKFry/b4VCCso2GKCe:4HxjEiW6pfMeFrSb4VFso2Gte
TLSH
T12847BE11579FD865E24F8570C3059B219BA33CCA1A2175AAE8CC3B701BFFB656A3C709
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5694920

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

suapp_pro.pdb

kernel32

AcquireSRWLockExclusive AddVectoredExceptionHandler CloseHandle CompareStringOrdinal CompareStringW CopyFileExW CreateDirectoryW CreateFileW CreateMutexA CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DeleteFileW DuplicateHandle EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileType GetFinalPathNameByHandleW GetFullPathNameW GetLastError GetLogicalDrives GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathW GetTimeZoneInformationForYear GetUserDefaultUILanguage GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsWow64Process LCIDToLocaleName LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW MultiByteToWideChar OpenProcess OutputDebugStringA OutputDebugStringW Process32FirstW Process32NextW QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFileEx ReleaseMutex ReleaseSRWLockExclusive RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetEnvironmentVariableA SetFileInformationByHandle SetFilePointerEx SetFileTime SetHandleInformation SetLastError SetStdHandle SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepConditionVariableSRW SleepEx SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile WriteFileEx lstrlenW

advapi32

AdjustTokenPrivileges CreateProcessWithTokenW DuplicateTokenEx EventRegister EventSetInformation EventUnregister EventWriteTransfer LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyW RegDeleteTreeW RegDeleteValueW RegGetValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

ole32

CoCreateInstance CoInitializeEx CoUninitialize OleInitialize RegisterDragDrop RevokeDragDrop

user32

AdjustWindowRectEx AppendMenuW ChangeDisplaySettingsExW ClientToScreen ClipCursor CloseTouchInputHandle CreatePopupMenu CreateWindowExW DefWindowProcW DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawTextW EnableMenuItem EnumChildWindows EnumDisplayMonitors EnumWindows FillRect GetActiveWindow GetAsyncKeyState GetClientRect GetClipCursor GetCursorPos GetDC GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMessageA GetMessageW GetMonitorInfoW GetRawInputData GetShellWindow GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTouchInputInfo GetUpdateRect GetWindow GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowThreadProcessId InvalidateRgn IsIconic IsProcessDPIAware IsWindow IsWindowVisible LoadCursorW LoadIconW LoadImageW MapVirtualKeyExW MapVirtualKeyW MessageBoxW MonitorFromPoint MonitorFromRect MonitorFromWindow MsgWaitForMultipleObjectsEx PeekMessageW PostMessageW PostThreadMessageW RedrawWindow RegisterClassExW RegisterClassW RegisterRawInputDevices RegisterTouchWindow RegisterWindowMessageA RegisterWindowMessageW ReleaseCapture ReleaseDC ScreenToClient SendInput SendMessageW SetCapture SetClassLongPtrW SetCursor SetFocus SetForegroundWindow SetPropW SetWindowDisplayAffinity SetWindowLongPtrW SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn ShowCursor ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicodeEx TrackMouseEvent TrackPopupMenu TranslateMessage ValidateRect

shell32

DragFinish DragQueryFileW IsUserAnAdmin SHAppBarMessage SHChangeNotify SHCreateItemFromParsingName SHGetFolderPathW ShellExecuteExW Shell_NotifyIconW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

gdi32

CreateRectRgn CreateRoundRectRgn CreateSolidBrush DeleteObject GetDeviceCaps GetTextExtentPoint32W SetBkMode SetTextColor

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

combase

CoCreateFreeThreadedMarshaler CoTaskMemAlloc CoTaskMemFree

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpOpen WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpSetOption WinHttpSetTimeouts

ws2_32

WSACleanup WSAGetLastError WSASocketW WSAStartup closesocket connect freeaddrinfo getaddrinfo recv send

wintrust

WinVerifyTrust

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

comctl32

DefSubclassProc RemoveWindowSubclass SetWindowSubclass

ntdll

NtCreateNamedPipeFile NtOpenFile NtReadFile NtWriteFile RtlGetVersion RtlNtStatusToDosError

shlwapi

SHCreateMemStream

oleaut32

GetErrorInfo SetErrorInfo SysFreeString SysStringLen

Name

.text

Size

5.5MB

Virtual Size

5.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

134KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

333B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

388KB

Virtual Size

387KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-12_44fffad613a1b2d147c8305f42826a34_akira_icedid_megazord_rusty-stealer_ryuk

kernel32

advapi32

ole32

user32

shell32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

gdi32

dwmapi

combase

winhttp

ws2_32

wintrust

version

comctl32

ntdll

shlwapi

oleaut32

generic