2026-08-19_b4266e421ad95e04660586b2b21d5046_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-19_b4266e421ad95e04660586b2b21d5046_akira_cobalt-strike_rusty-stealer_satacom
Size 1.4MB
Sample260819-e9fzbsdp2x
SHA256 c1ffbd1d8b21829a174d12bcccec85c9f72ec693f04a0d12ac875b9ddf17f07e
MD5 b4266e421ad95e04660586b2b21d5046
SHA1 fae98ead26343feb21016f8571783c170941dbc2
SHA512 0cbacfb2ebd5ed01815d842a9d830d56a913c910745ccc0bb3b9366da2aafe61fa00d635f4de91313d9f462dbc2cbf9885e4e3e6009dee96b392b1aab4bed55c
SSDEEP 24576:FPvj2xraLubGkf2YYPODufYHby3j3T4p1T2aSm2Okz:FSxraLuGfYHby3j3SyaSBOk
TLSH
T14865F7266778A1E9C1BBC078C2838F61B92130D90B356FF744D5826A2F25EF96E3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_b4266e421ad95e04660586b2b21d5046_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-19_b4266e421ad95e04660586b2b21d5046_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.4MB

2026-08-19_b4266e421ad95e04660586b2b21d5046_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH d2e18858daff0a4f1d394259651e43bf
SHA256 c1ffbd1d8b21829a174d12bcccec85c9f72ec693f04a0d12ac875b9ddf17f07e
MD5 b4266e421ad95e04660586b2b21d5046
SHA1 fae98ead26343feb21016f8571783c170941dbc2
SHA512 0cbacfb2ebd5ed01815d842a9d830d56a913c910745ccc0bb3b9366da2aafe61fa00d635f4de91313d9f462dbc2cbf9885e4e3e6009dee96b392b1aab4bed55c
SSDEEP 24576:FPvj2xraLubGkf2YYPODufYHby3j3T4p1T2aSm2Okz:FSxraLuGfYHby3j3SyaSBOk
TLSH
T14865F7266778A1E9C1BBC078C2838F61B92130D90B356FF744D5826A2F25EF96E3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1020064

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-5f46c6d1f6da78a4.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetSystemTimeAsFileTime PeekNamedPipe CloseHandle WaitForMultipleObjects WaitForSingleObject OpenSemaphoreA ReleaseSemaphore SetEvent CreateEventA GetProcAddress LoadLibraryA GetNativeSystemInfo CompareStringOrdinal GetLastError FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult FlushFileBuffers GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW InitializeSListHead TerminateProcess GetEnvironmentStringsW GetStdHandle CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW CopyFileExW FindFirstFileExW FindClose CreateHardLinkW ExitProcess GetSystemInfo SwitchToThread WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex DeleteFileW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep GetFileAttributesW GetModuleHandleW FormatMessageW GetModuleHandleA GetTempPathW FindNextFileW SetUnhandledExceptionFilter GetExitCodeProcess

advapi32

RegOpenKeyExW RegQueryValueExW RegEnumKeyExW RegCloseKey

ole32

CoInitializeEx CoCreateInstance

oleaut32

SysFreeString SysStringLen

ntdll

NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError NtOpenFile NtWriteFile

vcruntime140

__current_exception __current_exception_context _CxxThrowException memset memcmp memcpy __CxxFrameHandler3 memmove __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

__p___argv _seh_filter_exe _set_app_type _crt_atexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc terminate _cexit _c_exit _register_thread_local_exe_atexit_callback _register_onexit_function _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_b4266e421ad95e04660586b2b21d5046_akira_cobalt-strike_rusty-stealer_satacom

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic