2026-08-13_51f1bae6355b3dfa7eac825baffad52e_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-13_51f1bae6355b3dfa7eac825baffad52e_akira_cobalt-strike_rusty-stealer_satacom
Size 180KB
Sample260813-lnhpcsvyf1
SHA256 bd46dedf76a1d0217ded4c31158661bf2d4a54abc8e055dc6661b7286731baff
MD5 51f1bae6355b3dfa7eac825baffad52e
SHA1 a0a8c9f8ad34462cb964196ab1e38df72509a85f
SHA512 6fd0312f17694ef041111b3705760ab95b23428e620a0e16dd817c9eb0160d812c40d11e46db662287f40b008e0faf9188b710b416ca7ca9204289d8cd3fc324
SSDEEP 3072:iF7mCBmpbvwxqqmy0mEKmYtVxa5jh9hE1FHG2OjWQazG:g7mCBuvLqmybX9Za5REWJ
TLSH
T1B5046C23B76151EDD46FC03882968A66B53270990F216BFF1B94423C2E66DF5AF3C718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-13_51f1bae6355b3dfa7eac825baffad52e_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-13_51f1bae6355b3dfa7eac825baffad52e_akira_cobalt-strike_rusty-stealer_satacom

.exe 180KB

2026-08-13_51f1bae6355b3dfa7eac825baffad52e_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 1cda2b34d626152a5e603b91f59917c0
SHA256 bd46dedf76a1d0217ded4c31158661bf2d4a54abc8e055dc6661b7286731baff
MD5 51f1bae6355b3dfa7eac825baffad52e
SHA1 a0a8c9f8ad34462cb964196ab1e38df72509a85f
SHA512 6fd0312f17694ef041111b3705760ab95b23428e620a0e16dd817c9eb0160d812c40d11e46db662287f40b008e0faf9188b710b416ca7ca9204289d8cd3fc324
SSDEEP 3072:iF7mCBmpbvwxqqmy0mEKmYtVxa5jh9hE1FHG2OjWQazG:g7mCBuvLqmybX9Za5REWJ
TLSH
T1B5046C23B76151EDD46FC03882968A66B53270990F216BFF1B94423C2E66DF5AF3C718
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

116096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bididump.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetLastError CloseHandle WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc ReadConsoleW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW GetModuleHandleA

ntdll

NtWriteFile NtReadFile RtlNtStatusToDosError

vcruntime140

__current_exception_context _CxxThrowException memset memmove memcmp __C_specific_handler __current_exception __CxxFrameHandler3 memcpy

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-runtime-l1-1-0

_set_app_type _crt_atexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe terminate _register_onexit_function _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-13_51f1bae6355b3dfa7eac825baffad52e_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic