2026-08-15_68940370fe9acca8702663c2c4734884_akira_cobalt-strike_icedid_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_68940370fe9acca8702663c2c4734884_akira_cobalt-strike_icedid_rusty-stealer
Size 507KB
Sample260815-eabwbsel5t
SHA256 f8a80c63690b780444fbf49b5a48e5604e03f9de3c51eb60c52b09ecb9a4395a
MD5 68940370fe9acca8702663c2c4734884
SHA1 bc1f039cce9244ff39c148c0eddea92032b2542e
SHA512 207face568800b4a8fc4abe24580ba167b9e13cab5a42330f99d2cf8445f8c70e56d11ddab480bfdde4ccdc8102c48262e932ca732d17409eb8e78f47f3d0c42
SSDEEP 6144:+SaLAt/OazTfkn5X4j+mO+Hf1xehOXQRnfy5joSfypGVC19O2vJvDLvk85QYOPi2:+Sa8savwKZdxAOAaoHpGqZDLs82tUxY
TLSH
T19AB48D52B7954AFCD1AAC074C3464663AA76B8C90721F9FF02D082352F6AAF25F3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_68940370fe9acca8702663c2c4734884_akira_cobalt-strike_icedid_rusty-stealer

File Explorer

2026-08-15_68940370fe9acca8702663c2c4734884_akira_cobalt-strike_icedid_rusty-stealer

.exe 507KB

2026-08-15_68940370fe9acca8702663c2c4734884_akira_cobalt-strike_icedid_rusty-stealer

IMPHASH a4293982a27788d1bacfc255d51dde2e
SHA256 f8a80c63690b780444fbf49b5a48e5604e03f9de3c51eb60c52b09ecb9a4395a
MD5 68940370fe9acca8702663c2c4734884
SHA1 bc1f039cce9244ff39c148c0eddea92032b2542e
SHA512 207face568800b4a8fc4abe24580ba167b9e13cab5a42330f99d2cf8445f8c70e56d11ddab480bfdde4ccdc8102c48262e932ca732d17409eb8e78f47f3d0c42
SSDEEP 6144:+SaLAt/OazTfkn5X4j+mO+Hf1xehOXQRnfy5joSfypGVC19O2vJvDLvk85QYOPi2:+Sa8savwKZdxAOAaoHpGqZDLs82tUxY
TLSH
T19AB48D52B7954AFCD1AAC074C3464663AA76B8C90721F9FF02D082352F6AAF25F3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

250888

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rust_cat.pdb

user32

CopyIcon DispatchMessageW TranslateMessage GetMessageW CreateWindowExW RegisterClassW LookupIconIdFromDirectoryEx MessageBoxW AppendMenuW CreatePopupMenu RegisterWindowMessageA TrackPopupMenu SetForegroundWindow GetCursorPos DefWindowProcW GetWindowLongPtrW SetWindowLongPtrW SendMessageW DestroyMenu CreateIconFromResourceEx DestroyIcon PostMessageW

kernel32

FlushFileBuffers HeapSize LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx GetStringTypeW GetFileType SetStdHandle SetThreadStackGuarantee GetCurrentThread SwitchToThread GetCurrentProcessId WaitForSingleObjectEx GetCurrentProcess ReleaseMutex SetEnvironmentVariableW GetLastError GetSystemDirectoryW GetWindowsDirectoryW DuplicateHandle SleepEx GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW GetSystemTimes FindFirstFileExW GetProcAddress LoadLibraryExA GetProcessHeap HeapFree HeapAlloc FormatMessageW SetLastError SetFilePointerEx CreateWaitableTimerExW QueryPerformanceFrequency Sleep WaitForSingleObject SetWaitableTimer CloseHandle GetModuleHandleW AddVectoredExceptionHandler HeapReAlloc GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry CreateMutexA LoadLibraryA lstrlenW WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP GetCommandLineW MultiByteToWideChar GetEnvironmentVariableW GetModuleHandleA GetModuleFileNameW GetFullPathNameW CreateFileW SetFileInformationByHandle CompareStringOrdinal CreateProcessW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileAttributesW CreateNamedPipeW CreateThread ReadFileEx WriteFileEx QueryPerformanceCounter FindClose WriteConsoleW GetCurrentThreadId GetSystemTimeAsFileTime GetStartupInfoW IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary ExitProcess TerminateProcess FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter RtlUnwindEx RaiseException EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount LoadLibraryExW RtlPcToFileHeader WriteFile GetModuleHandleExW GetCommandLineA

shell32

Shell_NotifyIconW

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ntdll

RtlNtStatusToDosError NtWriteFile

oleaut32

SysStringLen SysFreeString

bcryptprimitives

ProcessPrng

advapi32

RegCreateKeyExW RegOpenKeyExW RegSetValueExW RegQueryValueExW RegDeleteValueW RegCloseKey

Name

.text

Size

305KB

Virtual Size

304KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

160KB

Virtual Size

159KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_68940370fe9acca8702663c2c4734884_akira_cobalt-strike_icedid_rusty-stealer

user32

kernel32

shell32

api-ms-win-core-synch-l1-2-0

ntdll

oleaut32

bcryptprimitives

advapi32

generic