2026-08-15_4165aa60742eeb3d12cfc90c7832b50b_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_4165aa60742eeb3d12cfc90c7832b50b_akira_rusty-stealer
Size 226KB
Sample260815-ljef5stycw
SHA256 baee770668c4ef26e95cad7ab2097291b8f927050811a102fe1572e1d47f776c
MD5 4165aa60742eeb3d12cfc90c7832b50b
SHA1 a49a0ce9958a8e840fa3ba419822eda3fd7cafcb
SHA512 8e818270ac38f1e823c43f6236a779b37b0b924d67756a189d05655c4e0eeda5fbbcdbdd7c05fe7049ae55ace720c9c666623e1960c8c4f1b6e6611ed7c3322a
SSDEEP 3072:bVYiqCTubQSmYJLZvZzP7Alvgi3v9Ty103wwhY/bBebQCX6QfseIP:9N5S3LZvZzzA9D3vFyO3HkcbQCX6cu
TLSH
T11A344A227A565DBCD84BC074C2458573A63234CA1B32F9FF12D952392F6AAF66F3C214
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_4165aa60742eeb3d12cfc90c7832b50b_akira_rusty-stealer

File Explorer

2026-08-15_4165aa60742eeb3d12cfc90c7832b50b_akira_rusty-stealer

.exe 226KB

2026-08-15_4165aa60742eeb3d12cfc90c7832b50b_akira_rusty-stealer

IMPHASH ff185aea8a1e9c5d7253d91ccb03eb6c
SHA256 baee770668c4ef26e95cad7ab2097291b8f927050811a102fe1572e1d47f776c
MD5 4165aa60742eeb3d12cfc90c7832b50b
SHA1 a49a0ce9958a8e840fa3ba419822eda3fd7cafcb
SHA512 8e818270ac38f1e823c43f6236a779b37b0b924d67756a189d05655c4e0eeda5fbbcdbdd7c05fe7049ae55ace720c9c666623e1960c8c4f1b6e6611ed7c3322a
SSDEEP 3072:bVYiqCTubQSmYJLZvZzP7Alvgi3v9Ty103wwhY/bBebQCX6QfseIP:9N5S3LZvZzzA9D3vFyO3HkcbQCX6cu
TLSH
T11A344A227A565DBCD84BC074C2458573A63234CA1B32F9FF12D952392F6AAF66F3C214
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

164640

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rx.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetModuleHandleW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead CloseHandle CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter CreateThread GetCurrentProcessId ReadFileEx GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetEnvironmentStringsW GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW ExitProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW IsProcessorFeaturePresent FormatMessageW GetModuleHandleA GetSystemTimeAsFileTime

ntdll

NtWriteFile NtCreateNamedPipeFile NtOpenFile RtlNtStatusToDosError

vcruntime140

memcmp __current_exception_context memset _CxxThrowException __C_specific_handler __current_exception memmove memcpy __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _seh_filter_exe _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_4165aa60742eeb3d12cfc90c7832b50b_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic