2026-08-20_0aa86fdea67b3a053f0966752d5784b9_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_0aa86fdea67b3a053f0966752d5784b9_akira_rusty-stealer
Size 1.1MB
Sample260820-mfb3aavcrf
SHA256 4ed6f8f454620e940cfd1a257d10f150f7469739a66ba21bccb9cf2e674b6195
MD5 0aa86fdea67b3a053f0966752d5784b9
SHA1 466dd9b95473ce4fcd23b61026fefabf37f62f79
SHA512 7c2ac6e1a20670aeda7cdf593c61e98c411e721899c89da0da3308105027cbaf38557b8a3fb04293ed9cf871ddb8bf182a7eb04fe4fde71f8d51ad88ca4e47dc
SSDEEP 12288:q+JSKtTq+VDc/H4lrTsVSeAngpA0omtsxXqtLGYiHfQpNklbSjfRzACO:xJTtRDc/H4lrTsVyngpNstqtGYSIJQ
TLSH
T1AB45F726666964D9C1BBC078C2938F62BA6130C90B352FF745D1827A2F25DFD6E3D324
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_0aa86fdea67b3a053f0966752d5784b9_akira_rusty-stealer

File Explorer

2026-08-20_0aa86fdea67b3a053f0966752d5784b9_akira_rusty-stealer

.exe 1.1MB

2026-08-20_0aa86fdea67b3a053f0966752d5784b9_akira_rusty-stealer

IMPHASH 3b3e7bf0886cb4085a0b848321f5ab88
SHA256 4ed6f8f454620e940cfd1a257d10f150f7469739a66ba21bccb9cf2e674b6195
MD5 0aa86fdea67b3a053f0966752d5784b9
SHA1 466dd9b95473ce4fcd23b61026fefabf37f62f79
SHA512 7c2ac6e1a20670aeda7cdf593c61e98c411e721899c89da0da3308105027cbaf38557b8a3fb04293ed9cf871ddb8bf182a7eb04fe4fde71f8d51ad88ca4e47dc
SSDEEP 12288:q+JSKtTq+VDc/H4lrTsVSeAngpA0omtsxXqtLGYiHfQpNklbSjfRzACO:xJTtRDc/H4lrTsVyngpNstqtGYSIJQ
TLSH
T1AB45F726666964D9C1BBC078C2938F62BA6130C90B352FF745D1827A2F25DFD6E3D324
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

835848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-34c1ca4a647da537.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

InitializeSListHead CloseHandle GetProcAddress LoadLibraryA GetNativeSystemInfo CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult FlushFileBuffers GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetStdHandle IsDebuggerPresent CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW CopyFileExW FindFirstFileExW FindClose CreateHardLinkW ExitProcess WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex DeleteFileW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetModuleHandleW FormatMessageW WaitForMultipleObjects GetModuleHandleA GetTempPathW IsProcessorFeaturePresent GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter FindNextFileW

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW RegEnumKeyExW

ole32

CoInitializeEx CoCreateInstance

oleaut32

SysStringLen SysFreeString

ntdll

NtWriteFile NtOpenFile NtReadFile NtCreateNamedPipeFile RtlNtStatusToDosError

vcruntime140

memset __current_exception_context __current_exception __C_specific_handler __CxxFrameHandler3 memcpy memcmp _CxxThrowException memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type _configure_narrow_argv _initialize_narrow_environment _seh_filter_exe terminate _initterm _initterm_e exit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _get_initial_narrow_environment _initialize_onexit_table _register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_0aa86fdea67b3a053f0966752d5784b9_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic