2026-08-19_f73bd625cc2a1aa7d6d3984685a0e0e7_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-19_f73bd625cc2a1aa7d6d3984685a0e0e7_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom
Size 8.1MB
Sample260819-vbddjsycka
SHA256 00dd0e37045462145c9101cec45c6bd21aa4151109c4307ce8811525b6b69553
MD5 f73bd625cc2a1aa7d6d3984685a0e0e7
SHA1 b40f21ff88e72b9750938540e8bcd45bb6a22e6f
SHA512 06b730cfd0c4415cf351ac532dbb676949bd9130897b4cc1c9fd593bf3d738cb9c63c576d93d59ab98de7691351c01dca61a461d18609ab0b3ca627f27c587fb
SSDEEP 196608:nc66MZItYcXbfPgI/FCCDeTYulxXQUJq:c5Mm+crrFbDeT7zq
TLSH
T1B8861273B69500B7FC4DC037C21E556E5D6FFC452E21A9EB17A1F1202A7DA930B38629
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_f73bd625cc2a1aa7d6d3984685a0e0e7_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

File Explorer

2026-08-19_f73bd625cc2a1aa7d6d3984685a0e0e7_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

.exe 8.1MB

2026-08-19_f73bd625cc2a1aa7d6d3984685a0e0e7_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

IMPHASH c4937aa7bd186343651db759ddccc975
SHA256 00dd0e37045462145c9101cec45c6bd21aa4151109c4307ce8811525b6b69553
MD5 f73bd625cc2a1aa7d6d3984685a0e0e7
SHA1 b40f21ff88e72b9750938540e8bcd45bb6a22e6f
SHA512 06b730cfd0c4415cf351ac532dbb676949bd9130897b4cc1c9fd593bf3d738cb9c63c576d93d59ab98de7691351c01dca61a461d18609ab0b3ca627f27c587fb
SSDEEP 196608:nc66MZItYcXbfPgI/FCCDeTYulxXQUJq:c5Mm+crrFbDeT7zq
TLSH
T1B8861273B69500B7FC4DC037C21E556E5D6FFC452E21A9EB17A1F1202A7DA930B38629
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

UPX dump on OEP (original entry point)
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

428932

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

SC_Starter.pdb

user32

SetTimer KillTimer GetWindowLongPtrW MapVirtualKeyW GetUpdateRect ValidateRect GetRawInputData RedrawWindow InvalidateRgn AdjustWindowRectEx GetMenu GetWindowLongW PostThreadMessageW MsgWaitForMultipleObjectsEx PeekMessageW DefWindowProcW RegisterClassExW RegisterWindowMessageA IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos SetMenuItemInfoW DrawIconEx GetDC AppendMenuW SendInput DrawTextW ReleaseDC FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo GetMenuItemInfoW PostQuitMessage ShowWindow CheckMenuItem SystemParametersInfoA GetActiveWindow RemoveMenu DrawMenuBar SetMenu CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu MessageBoxW SendMessageW DispatchMessageW TranslateMessage PostMessageW FindWindowW DestroyWindow UnregisterHotKey GetAsyncKeyState RegisterHotKey CreateWindowExA MessageBoxExW RegisterRawInputDevices GetMessageW SetWindowLongPtrW ChangeWindowMessageFilterEx CreateWindowExW RegisterClassW CreatePopupMenu CreateMenu CreateIcon GetWindowThreadProcessId IsWindowVisible SetWindowPos EnumWindows

kernel32

MultiByteToWideChar SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime DuplicateHandle GetFileAttributesW FreeEnvironmentStringsW GetEnvironmentStringsW CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW CompareStringOrdinal ReadFile CancelIo CreateEventW ExitProcess Sleep SetWaitableTimer CreateWaitableTimerExW QueryPerformanceFrequency QueryPerformanceCounter GetSystemTimePreciseAsFileTime ReadFileEx SleepEx WriteFileEx CreateThread GetFinalPathNameByHandleW GetModuleFileNameW FormatMessageW GetModuleHandleW GetFileInformationByHandleEx GetFileInformationByHandle CreateFileW FindClose FindFirstFileExW GetFullPathNameW CreateDirectoryW GetEnvironmentVariableW HeapAlloc WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle GetCurrentDirectoryW SetLastError RtlVirtualUnwind WideCharToMultiByte ReleaseMutex CreateMutexA GetCurrentProcess WaitForSingleObjectEx RtlLookupFunctionEntry RtlCaptureContext LoadLibraryW LoadLibraryA GetProcAddress lstrlenW HeapReAlloc HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler GetModuleHandleA SwitchToThread GetExitCodeProcess GetOverlappedResult WaitForMultipleObjects GetProcessId Process32NextW Process32FirstW CreateToolhelp32Snapshot SetFileInformationByHandle DeleteFileW GetCurrentThreadId GetCurrentProcessId CreateMutexW GetLastError CloseHandle WaitForSingleObject GetCommandLineW

ntdll

RtlGetVersion NtCreateNamedPipeFile RtlNtStatusToDosError NtReadFile NtOpenFile NtWriteFile

comctl32

DefSubclassProc SetWindowSubclass RemoveWindowSubclass

shell32

SHGetKnownFolderPath Shell_NotifyIconGetRect Shell_NotifyIconW

combase

CoTaskMemFree

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

gdi32

DeleteObject GetDeviceCaps DeleteDC SelectObject CreateDIBSection CreateCompatibleDC SetTextColor SetBkMode CreateSolidBrush

bcryptprimitives

ProcessPrng

vcruntime140

__C_specific_handler memcpy memmove __CxxFrameHandler3 __current_exception_context __current_exception memcmp memset

api-ms-win-crt-math-l1-1-0

__setusermatherr round

api-ms-win-crt-runtime-l1-1-0

_c_exit _get_initial_narrow_environment _initialize_narrow_environment _cexit __p___argv __p___argc _configure_narrow_argv _initialize_onexit_table _register_onexit_function _crt_atexit terminate _initterm _initterm_e exit _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type _exit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_f73bd625cc2a1aa7d6d3984685a0e0e7_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

user32

kernel32

ntdll

comctl32

shell32

combase

api-ms-win-core-synch-l1-2-0

gdi32

bcryptprimitives

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic