2026-08-19_fa847483791cb14797d2948f8abbb9e1_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-19_fa847483791cb14797d2948f8abbb9e1_akira_cobalt-strike_rusty-stealer_satacom
Size 1.2MB
Sample260819-eael8adj5t
SHA256 cc9916678954ffbe507ac9fe1c501148a541e6c85c32c77dff1143379f221014
MD5 fa847483791cb14797d2948f8abbb9e1
SHA1 701ada756cba689e5e815a2b84010d082cfacee9
SHA512 7774d4f1aed214036f2205f0822006f1f2461afd40d8577fa4a318bc279e325352811e0cd51a2658f961e0b40cb74538b6e976d473a96bb6236689cef2821a01
SSDEEP 24576:KA2PiZCeeuOOiV+0wYshRoa/fe+/79rthwgP2:0PiZCeeuOOM+0wYsh22feQ9xhwgP
TLSH
T17D55071AA23540D9D0BEC0788392AB617921388D87357FF74D84466B2F25FF8AE3D758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_fa847483791cb14797d2948f8abbb9e1_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-19_fa847483791cb14797d2948f8abbb9e1_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.2MB

2026-08-19_fa847483791cb14797d2948f8abbb9e1_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH e811f2a682c42c31567896998351205b
SHA256 cc9916678954ffbe507ac9fe1c501148a541e6c85c32c77dff1143379f221014
MD5 fa847483791cb14797d2948f8abbb9e1
SHA1 701ada756cba689e5e815a2b84010d082cfacee9
SHA512 7774d4f1aed214036f2205f0822006f1f2461afd40d8577fa4a318bc279e325352811e0cd51a2658f961e0b40cb74538b6e976d473a96bb6236689cef2821a01
SSDEEP 24576:KA2PiZCeeuOOiV+0wYshRoa/fe+/79rthwgP2:0PiZCeeuOOM+0wYsh22feQ9xhwgP
TLSH
T17D55071AA23540D9D0BEC0788392AB617921388D87357FF74D84466B2F25FF8AE3D758
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

948768

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-5e37144bed9800e0.pdb

kernel32

CloseHandle InitializeSListHead GetSystemTimeAsFileTime GetModuleHandleA FormatMessageW GetModuleHandleW SetUnhandledExceptionFilter GetLastError WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetFileInformationByHandle GetFileInformationByHandleEx GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW FindFirstFileExW FindClose GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile

vcruntime140

__current_exception_context memcpy __current_exception __C_specific_handler _CxxThrowException memmove memcmp __CxxFrameHandler3 memset

api-ms-win-crt-runtime-l1-1-0

terminate __p___argv _register_onexit_function _initialize_onexit_table _set_app_type _register_thread_local_exe_atexit_callback _seh_filter_exe __p___argc _crt_atexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _c_exit _cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_fa847483791cb14797d2948f8abbb9e1_akira_cobalt-strike_rusty-stealer_satacom

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic