2026-08-30_c7d31efa6af74b0debdfa5c49d2793d9_akira_cobalt-strike_icedid_rusty-stealer

General

Target
2026-08-30_c7d31efa6af74b0debdfa5c49d2793d9_akira_cobalt-strike_icedid_rusty-stealer
Size 508KB
Sample260831-fb4headl3v
SHA256 b27af700d5e635e26b3b169087c872706544a93e0ff80cb3241f96270215bea2
MD5 c7d31efa6af74b0debdfa5c49d2793d9
SHA1 13d17fc04f1a8d47e25dec18df2349ca53a1d0c7
SHA512 667a609b84b3c143ca8b00584c81b4d1ca17e9f32be65890e370054d8d0dfbdf839275f98521a89956facad660ef74e5830019e9511f1c6ad02d0810365dd00e
SSDEEP 6144:pp32l77/te7jmFCILgVgzf7G1Xg6PPgMEVNk0l5kr9PhypXI/LGXw6p4a6+5k:p0x7/teLI6aDyPgnv5kzJyXwSz6+K
TLSH
T1D1B4F115F7AD03F9D16A83B985961985E6B2B811A762AEEF0390114B0F333D55F3EF20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_c7d31efa6af74b0debdfa5c49d2793d9_akira_cobalt-strike_icedid_rusty-stealer

File Explorer

2026-08-30_c7d31efa6af74b0debdfa5c49d2793d9_akira_cobalt-strike_icedid_rusty-stealer

.exe 508KB

2026-08-30_c7d31efa6af74b0debdfa5c49d2793d9_akira_cobalt-strike_icedid_rusty-stealer

IMPHASH 87f69496cbf90a8f145b4b4e3a00c7a2
SHA256 b27af700d5e635e26b3b169087c872706544a93e0ff80cb3241f96270215bea2
MD5 c7d31efa6af74b0debdfa5c49d2793d9
SHA1 13d17fc04f1a8d47e25dec18df2349ca53a1d0c7
SHA512 667a609b84b3c143ca8b00584c81b4d1ca17e9f32be65890e370054d8d0dfbdf839275f98521a89956facad660ef74e5830019e9511f1c6ad02d0810365dd00e
SSDEEP 6144:pp32l77/te7jmFCILgVgzf7G1Xg6PPgMEVNk0l5kr9PhypXI/LGXw6p4a6+5k:p0x7/teLI6aDyPgnv5kzJyXwSz6+K
TLSH
T1D1B4F115F7AD03F9D16A83B985961985E6B2B811A762AEEF0390114B0F333D55F3EF20
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

45312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

triaftops.pdb

ntdll

NtReadFile RtlGetVersion RtlNtStatusToDosError NtWriteFile

kernel32

GetModuleHandleA GetProcAddress SetLastError GetLastError GetProcessHeap HeapFree SetFileInformationByHandle HeapAlloc GetFileInformationByHandle GetFileInformationByHandleEx CloseHandle CreateFileW SetFileTime GetFullPathNameW GetCurrentThread GetMaximumProcessorCount IsValidCodePage WaitForSingleObject IsDBCSLeadByte WriteConsoleW GetThreadId IsThreadAFiber GetCPInfo MultiByteToWideChar LoadLibraryA HeapReAlloc TryAcquireSRWLockExclusive GetStdHandle GetConsoleMode ReleaseSRWLockExclusive GetActiveProcessorGroupCount GetActiveProcessorCount GetDriveTypeW GetFileAttributesW GetCurrentProcessorNumber EnterCriticalSection SetFilePointerEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW GetACP GetOEMCP WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW HeapSize FlushFileBuffers GetConsoleOutputCP WriteFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-30_c7d31efa6af74b0debdfa5c49d2793d9_akira_cobalt-strike_icedid_rusty-stealer

ntdll

kernel32

generic