2026-08-14_6a0f73e0309f426d96ec318188d98f60_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_6a0f73e0309f426d96ec318188d98f60_akira_cobalt-strike_rusty-stealer_satacom
Size 709KB
Sample260814-jmh8dsgb49
SHA256 3885710f3821ac1e2cb0b2d0bbce8dac038a15b1fd683857824a2299f30b8566
MD5 6a0f73e0309f426d96ec318188d98f60
SHA1 089d862553e1507e42c09759ea49ff36f136682f
SHA512 f38d92d5292a49ce781885eeaeb9a0e2c3a572ebbf39b688bad01c1d30a41156f4a157f3e9d2e92b74e676e0907d121d811ccba0b416738f84d724ee6eb721c4
SSDEEP 12288:N84paOfBXy6w+BOWsfbqROFKB9iJr3qGNDMEzLfExTWZO70F:NtY+BOW4bWiJr3qGNDfzL8V7c
TLSH
T19BF40821BA5659ADC156C47483568AB37A3170CB1B31A9FF009952383FADEF95F3C328
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_6a0f73e0309f426d96ec318188d98f60_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-14_6a0f73e0309f426d96ec318188d98f60_akira_cobalt-strike_rusty-stealer_satacom

.exe 709KB

2026-08-14_6a0f73e0309f426d96ec318188d98f60_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 1349949c025477c7125a2ea83596d7f8
SHA256 3885710f3821ac1e2cb0b2d0bbce8dac038a15b1fd683857824a2299f30b8566
MD5 6a0f73e0309f426d96ec318188d98f60
SHA1 089d862553e1507e42c09759ea49ff36f136682f
SHA512 f38d92d5292a49ce781885eeaeb9a0e2c3a572ebbf39b688bad01c1d30a41156f4a157f3e9d2e92b74e676e0907d121d811ccba0b416738f84d724ee6eb721c4
SSDEEP 12288:N84paOfBXy6w+BOWsfbqROFKB9iJr3qGNDMEzLfExTWZO70F:NtY+BOW4bWiJr3qGNDfzL8V7c
TLSH
T19BF40821BA5659ADC156C47483568AB37A3170CB1B31A9FF009952383FADEF95F3C328
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

514240

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

LogiBatteryTray-40b41e4781b37cd6.pdb

kernel32

WideCharToMultiByte SwitchToThread GetSystemInfo WaitForSingleObjectEx ExitProcess CreateEventW WaitForSingleObject GetModuleFileNameW FindClose FindFirstFileExW CreateMutexA GetProcessHeap HeapFree HeapAlloc FormatMessageW GetCommandLineW GetEnvironmentVariableW lstrlenW GetModuleHandleA GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo MultiByteToWideChar GetModuleHandleW LoadLibraryA GetCurrentThreadId GetConsoleMode GetConsoleOutputCP ReleaseMutex GetFileAttributesW CreateFileW GetFileType ReadFile WaitForMultipleObjects GetLastError GetProcAddress WriteConsoleW CompareStringOrdinal FreeEnvironmentStringsW GetCurrentDirectoryW CloseHandle GetCurrentThread WriteFileEx SleepEx SetLastError GetFullPathNameW SetThreadStackGuarantee AddVectoredExceptionHandler SetFileInformationByHandle SetFileTime HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter SetFilePointerEx GetExitCodeProcess CreateThread CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetEnvironmentStringsW GetFileInformationByHandleEx GetFileInformationByHandle CancelIo GetSystemTimePreciseAsFileTime GetCurrentProcessId RtlVirtualUnwind ReadFileEx GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry InitializeSListHead SetUnhandledExceptionFilter GetSystemTimeAsFileTime

ntdll

NtCreateNamedPipeFile NtReadFile NtWriteFile NtOpenFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

bcryptprimitives

ProcessPrng

userenv

GetUserProfileDirectoryW

vcruntime140

memmove memset __C_specific_handler memcpy __current_exception _CxxThrowException memcmp __current_exception_context __CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

floor __setusermatherr fmod

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _exit _register_thread_local_exe_atexit_callback _initterm_e __p___argc _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _set_app_type _seh_filter_exe _cexit terminate _c_exit _register_onexit_function _initialize_onexit_table _initterm __p___argv exit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-14_6a0f73e0309f426d96ec318188d98f60_akira_cobalt-strike_rusty-stealer_satacom

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

bcryptprimitives

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic