2026-08-22_9c5a701e15b6581f92fccf267beb6f4d_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-22_9c5a701e15b6581f92fccf267beb6f4d_akira_rusty-stealer
Size 3.6MB
Sample260823-elndhaself
SHA256 ac2b2f9de943c226acf7877ef7924fa48947452350d10480c12660c13f6dda17
MD5 9c5a701e15b6581f92fccf267beb6f4d
SHA1 152a96a760f28d8a3eb77ea8cf76d31f97199e2e
SHA512 52d5821c3d59b806d24400a645c12b13d6974fb8060990568c7b71b90fcc6014f2cccca2652c4f9c11f7f4c0c6b8c7b1cff00d57212289a4eb0286f7f970f161
SSDEEP 49152:Ma7bBtysaI+4TiVq5oJVqpLOhg588FPop13kjF6p1nKdpIIUwmL3MnVRrCj4yuGb:1sr8Hmp118XCj4yuMIC4Lm
TLSH
T1BB067B127A5BACBCD15BC874830A4A631A2134DB1B26BFEF41C856353F6ABF45F38215
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_9c5a701e15b6581f92fccf267beb6f4d_akira_rusty-stealer

File Explorer

2026-08-22_9c5a701e15b6581f92fccf267beb6f4d_akira_rusty-stealer

.exe 3.6MB

2026-08-22_9c5a701e15b6581f92fccf267beb6f4d_akira_rusty-stealer

IMPHASH 50ae44dd898e01cecde71c8817fc740b
SHA256 ac2b2f9de943c226acf7877ef7924fa48947452350d10480c12660c13f6dda17
MD5 9c5a701e15b6581f92fccf267beb6f4d
SHA1 152a96a760f28d8a3eb77ea8cf76d31f97199e2e
SHA512 52d5821c3d59b806d24400a645c12b13d6974fb8060990568c7b71b90fcc6014f2cccca2652c4f9c11f7f4c0c6b8c7b1cff00d57212289a4eb0286f7f970f161
SSDEEP 49152:Ma7bBtysaI+4TiVq5oJVqpLOhg588FPop13kjF6p1nKdpIIUwmL3MnVRrCj4yuGb:1sr8Hmp118XCj4yuMIC4Lm
TLSH
T1BB067B127A5BACBCD15BC874830A4A631A2134DB1B26BFEF41C856353F6ABF45F38215
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1626816

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

pylance_indexer.pdb

kernel32

GetFullPathNameW FindFirstFileExW CreateFileW SetFileTime WriteConsoleW FindClose GetFileInformationByHandle GetFileInformationByHandleEx ReadConsoleW GetLastError SetLastError DuplicateHandle GetProcAddress GetConsoleOutputCP GetModuleHandleA CloseHandle SetFileInformationByHandle FindNextFileW GetConsoleMode GetStdHandle HeapAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime ExitProcess QueryPerformanceFrequency FormatMessageW GetModuleHandleW GetEnvironmentVariableW IsProcessorFeaturePresent MultiByteToWideChar WaitForSingleObject ReleaseMutex WideCharToMultiByte CreateMutexA GetCurrentProcessId lstrlenW LoadLibraryA WaitForSingleObjectEx GetCurrentDirectoryW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId CreateThread GetProcessHeap HeapFree QueryPerformanceCounter HeapReAlloc SwitchToThread GetCommandLineW GetModuleFileNameW GetSystemInfo UnmapViewOfFile AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread CreateFileMappingW MapViewOfFile GetCurrentProcess VirtualProtect

ntdll

RtlNtStatusToDosError NtWriteFile NtReadFile

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

vcruntime140

memcpy __CxxFrameHandler3 memmove memcmp memset _CxxThrowException __C_specific_handler __current_exception_context __current_exception

api-ms-win-crt-runtime-l1-1-0

_exit exit __p___argv _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _register_onexit_function _crt_atexit terminate __p___argc _seh_filter_exe _set_app_type _cexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-22_9c5a701e15b6581f92fccf267beb6f4d_akira_rusty-stealer

kernel32

ntdll

bcryptprimitives

api-ms-win-core-synch-l1-2-0

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic