2026-08-31_182435153928518b8e23daa6a115b961_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-31_182435153928518b8e23daa6a115b961_akira_rusty-stealer
Size 3.1MB
Sample260831-2nhmcszekg
SHA256 20c49db9a13d6f1b0bdd2098765f74fd2ede97b0a5e81ae7905229665da02a15
MD5 182435153928518b8e23daa6a115b961
SHA1 75c24ba2d2fe9f92639c93d6e9d21243d69d0b78
SHA512 91ddb9611d75a478e209e40367743bf7b069331fde195e806175e6fcb6e7318dd08ef373a6ba96d54916fd7a8f6d6c567f49034a6ad4fe581838164d24e1a69e
SSDEEP 49152:IJ7Y4FAlCfayST00WeqdvDNGT7XK9bVrfKJeq0JQjW5mwUz:IelOSw0bCbaz
TLSH
T192E5BF03F346CAEDC51AC1B44755A5339A67F085073AA2FF3BC81A24AA57AE04F1D35E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-31_182435153928518b8e23daa6a115b961_akira_rusty-stealer

File Explorer

2026-08-31_182435153928518b8e23daa6a115b961_akira_rusty-stealer

.exe 3.1MB

2026-08-31_182435153928518b8e23daa6a115b961_akira_rusty-stealer

IMPHASH 2c6cb31e8b3a2dd4ca4645c601e5180f
SHA256 20c49db9a13d6f1b0bdd2098765f74fd2ede97b0a5e81ae7905229665da02a15
MD5 182435153928518b8e23daa6a115b961
SHA1 75c24ba2d2fe9f92639c93d6e9d21243d69d0b78
SHA512 91ddb9611d75a478e209e40367743bf7b069331fde195e806175e6fcb6e7318dd08ef373a6ba96d54916fd7a8f6d6c567f49034a6ad4fe581838164d24e1a69e
SSDEEP 49152:IJ7Y4FAlCfayST00WeqdvDNGT7XK9bVrfKJeq0JQjW5mwUz:IelOSw0bCbaz
TLSH
T192E5BF03F346CAEDC51AC1B44755A5339A67F085073AA2FF3BC81A24AA57AE04F1D35E
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1116100

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

audio_endpoint_tool.pdb

kernel32

GetLastError GetCurrentThreadId FormatMessageW LoadLibraryExA GetFileAttributesW SetWaitableTimer CreateWaitableTimerExW GetCurrentThread GlobalLock GlobalUnlock GlobalFree GlobalAlloc GlobalSize HeapAlloc FindClose FindFirstFileExW ReleaseMutex CreateMutexA LoadLibraryA WaitForSingleObjectEx ExitProcess SetThreadStackGuarantee DuplicateHandle GetModuleHandleW GetCurrentProcess CreateProcessW GetFileInformationByHandleEx GetFileInformationByHandle SetFileInformationByHandle SetFileTime CreateFileW CreateThread HeapReAlloc IsProcessorFeaturePresent HeapFree GetProcessHeap WaitForSingleObject GetFullPathNameW SetLastError SleepEx SwitchToThread LoadLibraryW GetModuleHandleA Sleep CloseHandle GetModuleFileNameW FreeLibrary SetThreadErrorMode LoadLibraryExW GetProcAddress GetCurrentProcessId WideCharToMultiByte UnhandledExceptionFilter MultiByteToWideChar CompareStringOrdinal ReadFileEx WriteFileEx QueryPerformanceFrequency QueryPerformanceCounter GetSystemTimePreciseAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetStdHandle AddVectoredExceptionHandler GetCurrentDirectoryW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetConsoleOutputCP GetConsoleMode WriteConsoleW lstrlenW GetCommandLineW GetEnvironmentVariableW SetUnhandledExceptionFilter

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

advapi32

RevertToSelf ImpersonateAnonymousToken RegOpenKeyExW RegQueryValueExW RegSetValueExW RegDeleteValueW RegCloseKey

combase

CoTaskMemFree

ole32

CoUninitialize CoCreateInstance PropVariantClear CoInitializeEx RevokeDragDrop OleInitialize RegisterDragDrop

shell32

Shell_NotifyIconW ExtractIconW DragQueryFileW DragFinish

user32

AdjustWindowRectEx DestroyIcon IsProcessDPIAware GetWindowLongW SetWindowLongW EnableMenuItem GetSystemMenu ClipCursor GetClipCursor GetWindowRect CreateIcon KillTimer SetTimer RegisterWindowMessageA IsIconic ShowCursor ChangeDisplaySettingsExW SetWindowPlacement GetWindowTextLengthW GetWindowTextW GetClassInfoExW GetClassNameW GetWindowPlacement GetDC SetWindowTextW GetForegroundWindow SetCursorPos ClientToScreen ReleaseDC CreateIconFromResourceEx InvalidateRgn GetClientRect SetWindowDisplayAffinity ValidateRect GetMonitorInfoW SetCursor LoadCursorW SetWindowPos MonitorFromWindow RedrawWindow MonitorFromRect ScreenToClient GetMenu RegisterClassExW PeekMessageW SendMessageW GetSystemMetrics DestroyWindow PostMessageW MonitorFromPoint AppendMenuW DispatchMessageW TranslateMessage GetMessageW LoadIconW EnumDisplayMonitors CreateWindowExW RegisterClassW GetWindowLongPtrW ShowWindow FindWindowW DestroyMenu TrackPopupMenu SetForegroundWindow GetCursorPos CreatePopupMenu PostQuitMessage DefWindowProcW SetWindowLongPtrW SystemParametersInfoA FlashWindowEx TrackMouseEvent RegisterTouchWindow SetCapture ReleaseCapture CloseTouchInputHandle GetTouchInputInfo EmptyClipboard GetActiveWindow CloseClipboard RegisterClipboardFormatW SetClipboardData GetClipboardData OpenClipboard SendInput GetKeyboardState GetAsyncKeyState GetRawInputData RegisterRawInputDevices ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW GetKeyState IsClipboardFormatAvailable MapVirtualKeyW

gdi32

DeleteObject GetDeviceCaps CreateRectRgn SetPixelFormat DescribePixelFormat ChoosePixelFormat SwapBuffers

ntdll

NtReadFile NtCreateNamedPipeFile NtWriteFile NtOpenFile RtlNtStatusToDosError

shlwapi

AssocQueryStringW

oleaut32

GetErrorInfo SysStringLen SysFreeString

bcryptprimitives

ProcessPrng

opengl32

wglShareLists wglDeleteContext wglMakeCurrent wglGetCurrentContext wglGetCurrentDC wglCreateContext wglGetProcAddress

dwmapi

DwmEnableBlurBehindWindow

imm32

ImmGetCompositionStringW ImmSetCandidateWindow ImmSetCompositionWindow ImmAssociateContextEx ImmReleaseContext ImmGetContext

uxtheme

SetWindowTheme

vcruntime140

__C_specific_handler memmove __current_exception_context __current_exception memset memcmp memcpy __CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

atan2f _hypotf cos sin cosf sinf exp2f acosf cbrtf round truncf ceil floorf trunc expf ceilf roundf floor powf __setusermatherr

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe __p___argv _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv _set_app_type _initialize_onexit_table _register_onexit_function _crt_atexit terminate _cexit _initialize_narrow_environment _exit __p___argc exit _initterm_e _initterm _get_initial_narrow_environment strerror

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.aethash

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

169KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-31_182435153928518b8e23daa6a115b961_akira_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

advapi32

combase

ole32

shell32

user32

gdi32

ntdll

shlwapi

oleaut32

bcryptprimitives

opengl32

dwmapi

imm32

uxtheme

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic