2026-08-25_8d58a5db6a02803ddf6da6e0b7bb555a_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-25_8d58a5db6a02803ddf6da6e0b7bb555a_akira_cobalt-strike_rusty-stealer_satacom
Size 190KB
Sample260826-wjj2qstdma
SHA256 c4107c3806393ad833f1b87f5517a2bf98545fda73aae162b38812b3471ab3ba
MD5 8d58a5db6a02803ddf6da6e0b7bb555a
SHA1 b9cd8893be39b7525897960a721261172018d338
SHA512 792cb61e0496ce252aa83c67b7231ee0f061feef921ab8caf7b1155ad58296977396584aa42a3badfb2687715984f10ab88c54bb59d0e180969f7749c91fc550
SSDEEP 3072:OEJ8lfboT5T0XYOwjUWlmfQ9BUK71WRqKv/aZ:OEJ8VoT5T0XKjd7V7wH6
TLSH
T174145D22794141EDD45BC038D39686B2B57270C91F2259FF16A9423C3E79EFAAF3C264
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-25_8d58a5db6a02803ddf6da6e0b7bb555a_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-25_8d58a5db6a02803ddf6da6e0b7bb555a_akira_cobalt-strike_rusty-stealer_satacom

.exe 190KB

2026-08-25_8d58a5db6a02803ddf6da6e0b7bb555a_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH b2cb7a4682420a86ff48c30003e47b34
SHA256 c4107c3806393ad833f1b87f5517a2bf98545fda73aae162b38812b3471ab3ba
MD5 8d58a5db6a02803ddf6da6e0b7bb555a
SHA1 b9cd8893be39b7525897960a721261172018d338
SHA512 792cb61e0496ce252aa83c67b7231ee0f061feef921ab8caf7b1155ad58296977396584aa42a3badfb2687715984f10ab88c54bb59d0e180969f7749c91fc550
SSDEEP 3072:OEJ8lfboT5T0XYOwjUWlmfQ9BUK71WRqKv/aZ:OEJ8VoT5T0XKjd7V7wH6
TLSH
T174145D22794141EDD45BC038D39686B2B57270C91F2259FF16A9423C3E79EFAAF3C264
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

129312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e_spammer.pdb

ntdll

RtlNtStatusToDosError NtWriteFile NtSetTimerResolution NtQueryTimerResolution

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetModuleHandleA CloseHandle GetCurrentThread SetThreadPriority QueryPerformanceFrequency QueryPerformanceCounter GetLastError GetCurrentThreadId WaitForSingleObject SetLastError GetProcessHeap HeapFree HeapReAlloc CreateThread GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep GetModuleHandleW FormatMessageW

user32

GetWindowThreadProcessId ToUnicodeEx GetKeyboardLayout AttachThreadInput CallNextHookEx SendInput GetMessageA SetWindowsHookExA GetForegroundWindow GetKeyState GetKeyboardState

vcruntime140

__current_exception __current_exception_context memcmp memmove __C_specific_handler memcpy memset __CxxFrameHandler3 _CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initterm_e _set_app_type _exit _get_initial_narrow_environment _initialize_narrow_environment __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback exit _seh_filter_exe _initterm _initialize_onexit_table _register_onexit_function _crt_atexit terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-25_8d58a5db6a02803ddf6da6e0b7bb555a_akira_cobalt-strike_rusty-stealer_satacom

ntdll

api-ms-win-core-synch-l1-2-0

kernel32

user32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic