General
- Target 2026-08-15_475f49e0a67ba0672d1daf4d1bd0d152_akira_rusty-stealer
- Size 137KB
- Sample260815-grzd3afp61
- SHA256 5ec8a4b06f10c345c611d58acf6bc51e0a98fdc0e1c71ea3ec31e7400a09267d
- MD5 475f49e0a67ba0672d1daf4d1bd0d152
- SHA1 8d9c1d4260437e49ff82ae921cfc23377c763896
- SHA512 95f03c21fa3b9094d79e0ec534e41cfea2a8e8fbce048e5bddbe59fbbac5f2c58d769ca68b34abc36c39500235c860cd495ac4b8a14db86bf79d6c936d84ba54
- SSDEEP 1536:VcL0aLxwkvSN2aweBKT6S/wkwPm/rlc5vhxh9DJw30T8TT0Py48:uL0ixv3NBR/wkAicvxNw30ecyf
- TLSH T185D3A12E6C2212EAF0B5C2B4817C46756D73F2DE072D9BFB1A5CC1242F657D5AE28E10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_475f49e0a67ba0672d1daf4d1bd0d152_akira_rusty-stealer.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_475f49e0a67ba0672d1daf4d1bd0d152_akira_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://192.168.1.16:2333/yB6l
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 733; .NET CLR 2.0.50727)
Targets
-
- Target 2026-08-15_475f49e0a67ba0672d1daf4d1bd0d152_akira_rusty-stealer
- Size 137KB
- SHA256 5ec8a4b06f10c345c611d58acf6bc51e0a98fdc0e1c71ea3ec31e7400a09267d
- MD5 475f49e0a67ba0672d1daf4d1bd0d152
- SHA1 8d9c1d4260437e49ff82ae921cfc23377c763896
- SHA512 95f03c21fa3b9094d79e0ec534e41cfea2a8e8fbce048e5bddbe59fbbac5f2c58d769ca68b34abc36c39500235c860cd495ac4b8a14db86bf79d6c936d84ba54
- SSDEEP 1536:VcL0aLxwkvSN2aweBKT6S/wkwPm/rlc5vhxh9DJw30T8TT0Py48:uL0ixv3NBR/wkAicvxNw30ecyf
- TLSH T185D3A12E6C2212EAF0B5C2B4817C46756D73F2DE072D9BFB1A5CC1242F657D5AE28E10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.