2026-08-15_f7a432c81b883a8ff5669c9c66eb48ec_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_f7a432c81b883a8ff5669c9c66eb48ec_akira_cobalt-strike_rusty-stealer_satacom
Size 154KB
Sample260815-fp73razwat
SHA256 b541d2cfe2b8e9a09fbfe63c61e7b41c92440d7e0314b034f7f5ed032342af4a
MD5 f7a432c81b883a8ff5669c9c66eb48ec
SHA1 120c19351363f7b70a486d685e77ab87752564a2
SHA512 10a428b209f8c301969b4a9fdfd0da716f4c15ca36e4eb50b2e4a8c768575046fb81cec61cb16aedf2a7d73c7d8d143c4443b6cc42883ec8a68a72323c8c625b
SSDEEP 1536:NVX78hKUxgNwHM/6vrFIm23t60mKKdMo9ZO2/8Lk8P8jzRNGpaURK4c9ARZsKxYk:Nh4CNwsiDemmwhtOR+bKxV6bC16fSd
TLSH
T17CF36C23B64550F9E44AC078835586B3AB767CD50F2269FF02A472382F39AE53F3D618
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-15_f7a432c81b883a8ff5669c9c66eb48ec_akira_cobalt-strike_rusty-stealer_satacom

.exe 154KB

2026-08-15_f7a432c81b883a8ff5669c9c66eb48ec_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 8a8c37fa0b90f46e81f9707da0ea83df
SHA256 b541d2cfe2b8e9a09fbfe63c61e7b41c92440d7e0314b034f7f5ed032342af4a
MD5 f7a432c81b883a8ff5669c9c66eb48ec
SHA1 120c19351363f7b70a486d685e77ab87752564a2
SHA512 10a428b209f8c301969b4a9fdfd0da716f4c15ca36e4eb50b2e4a8c768575046fb81cec61cb16aedf2a7d73c7d8d143c4443b6cc42883ec8a68a72323c8c625b
SSDEEP 1536:NVX78hKUxgNwHM/6vrFIm23t60mKKdMo9ZO2/8Lk8P8jzRNGpaURK4c9ARZsKxYk:Nh4CNwsiDemmwhtOR+bKxV6bC16fSd
TLSH
T17CF36C23B64550F9E44AC078835586B3AB767CD50F2269FF02A472382F39AE53F3D618
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

d3:e9:49:16:9e:23:aa:6f:5e:6e:98:76:75:fc:85:ce:65:b0:65:ff:80:a2:c6:61:1c:10:f4:7b:f1:9e:d0:f8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=ALI ALSHARIFI,O=ALI ALSHARIFI,L=Kuwait City,C=KW

Chains

Aug 9, 2026

CN=ALI ALSHARIFI,O=ALI ALSHARIFI,L=Kuwait City,C=KW

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=ALI ALSHARIFI,O=ALI ALSHARIFI,L=Kuwait City,C=KW

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=ALI ALSHARIFI,O=ALI ALSHARIFI,L=Kuwait City,C=KW

Serial Number

18:e3:9e:88:96:d2:39:fa:85:00:f1:72:0b:63:eb:ad

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 18, 2026 - Jun 18, 2027

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamp 2026,O=Asseco Data Systems S.A.,C=PL

Serial Number

28:f0:77:c1:1c:36:bd:fe:5f:74:32:47:70:27:2e:03

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 11, 2026 - Feb 27, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

Major OS version

Entry point

99984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

RedBooster_smbus.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

kernel32

AddVectoredExceptionHandler HeapFree GetProcessHeap RtlCaptureContext GetModuleFileNameW SetThreadStackGuarantee GetCommandLineW GetCurrentDirectoryW GetCurrentThread QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleA GetEnvironmentVariableW HeapAlloc WriteConsoleW MultiByteToWideChar InitializeSListHead WaitForSingleObject SetUnhandledExceptionFilter GetConsoleOutputCP GetConsoleMode GetStdHandle RtlVirtualUnwind WideCharToMultiByte GetCurrentThreadId FormatMessageW ReleaseMutex CloseHandle CreateMutexA GetCurrentProcessId lstrlenW GetProcAddress LoadLibraryA WaitForSingleObjectEx GetModuleHandleW RtlLookupFunctionEntry SetLastError GetCurrentProcess GetLastError HeapReAlloc

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp __CxxFrameHandler3 memset memmove __current_exception_context __current_exception __C_specific_handler memcpy

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _set_app_type _register_onexit_function _initialize_onexit_table terminate _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _configure_narrow_argv _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_f7a432c81b883a8ff5669c9c66eb48ec_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic