2026-08-19_c28db256c9bbe2f5215aaf718f8a1acd_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-19_c28db256c9bbe2f5215aaf718f8a1acd_akira_cobalt-strike_rusty-stealer_satacom
Size 2.4MB
Sample260819-e3spjsytgx
SHA256 be85b6f6b64727a518e71764be6c335887f5184ba08bc7c5246a123f9788d393
MD5 c28db256c9bbe2f5215aaf718f8a1acd
SHA1 62bc79d67e222ed7f97026e38c263e5a1e1475d6
SHA512 6ce32fdf3f4ac81642d0c0cf1abbbc8a5e45eb04fdf3ba6b8e9188f39b950b0cdd632d92fb324ff90f57f2b60fa0852b97054e13139dcfad28f733dbeb67ccae
SSDEEP 49152:xoluGcpWGJwAC9oOglxkvYRTBQCmoCDOU2coIANx7:WR6BG2TmH2coIANx
TLSH
T158B53911FB8A59FDC0DAC470830647225B31B4CF0B256AEF65D845352FAAAF41F787A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_c28db256c9bbe2f5215aaf718f8a1acd_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-19_c28db256c9bbe2f5215aaf718f8a1acd_akira_cobalt-strike_rusty-stealer_satacom

.exe 2.4MB

2026-08-19_c28db256c9bbe2f5215aaf718f8a1acd_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH c0fe8daa3127cf2a2c7b4ca3d930243c
SHA256 be85b6f6b64727a518e71764be6c335887f5184ba08bc7c5246a123f9788d393
MD5 c28db256c9bbe2f5215aaf718f8a1acd
SHA1 62bc79d67e222ed7f97026e38c263e5a1e1475d6
SHA512 6ce32fdf3f4ac81642d0c0cf1abbbc8a5e45eb04fdf3ba6b8e9188f39b950b0cdd632d92fb324ff90f57f2b60fa0852b97054e13139dcfad28f733dbeb67ccae
SSDEEP 49152:xoluGcpWGJwAC9oOglxkvYRTBQCmoCDOU2coIANx7:WR6BG2TmH2coIANx
TLSH
T158B53911FB8A59FDC0DAC470830647225B31B4CF0B256AEF65D845352FAAAF41F787A8
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1443664

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

hol_guard_runtime.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId CreateMutexA CloseHandle GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SwitchToThread CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject Sleep QueryPerformanceCounter GetSystemInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW SetFileInformationByHandle GetCurrentProcess GetStdHandle GetCurrentProcessId SetHandleInformation QueryPerformanceFrequency GetProcessHeap HeapFree FindFirstFileExW FindClose HeapReAlloc lstrlenW ReleaseMutex GetModuleHandleW FormatMessageW GetModuleFileNameW ExitProcess CreateThread GetFullPathNameW GetModuleHandleA GetProcAddress HeapAlloc CreateFileW GetFileInformationByHandle GetFileInformationByHandleEx GetFinalPathNameByHandleW GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW WideCharToMultiByte ReadConsoleW WaitForSingleObjectEx LoadLibraryA

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile

ws2_32

WSAGetLastError setsockopt recv WSARecv WSASend send WSASocketW bind listen getsockname WSACleanup WSAStartup closesocket accept

vcruntime140

memcmp __current_exception_context __current_exception memmove _CxxThrowException memset memcpy __CxxFrameHandler3 __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _initterm_e _register_thread_local_exe_atexit_callback _seh_filter_exe terminate _initialize_onexit_table _register_onexit_function _crt_atexit _c_exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_c28db256c9bbe2f5215aaf718f8a1acd_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

ws2_32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic