2026-08-31_f5481eaa44be12a522e60bdbd82e3eef_akira_cobalt-strike_rusty-stealer_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-31_f5481eaa44be12a522e60bdbd82e3eef_akira_cobalt-strike_rusty-stealer_satacom_vidar
Size 10.7MB
Sample260901-3dzcsscp61
SHA256 3c23f65e06b44d6a3a30e75272c164f7fde4c2f4b74b7a027f9af797a2b00d15
MD5 f5481eaa44be12a522e60bdbd82e3eef
SHA1 eede80aea519b5d3db99a5fd92a0fffd167c5373
SHA512 ddd9d52f77eea3867686a8222037ebf92abe4e02e96763048274046f04b67ba2071b910ae8c92ebf4da85411bb5882c15b1f40715949791bd6975414c494e71d
SSDEEP 98304:sx3+UiEAib8QsmicYCduFJXTBWQ8Khj2Ak7wjnsr/eVD94FhUwsLvxIS:sc6AiQQYchduFJXjq2VD94bhS
TLSH
T105B6D725BA5F996CD05BC4B083478A76497130CB0B35B8BF54C496382F6EBF56F2831A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-31_f5481eaa44be12a522e60bdbd82e3eef_akira_cobalt-strike_rusty-stealer_satacom_vidar

File Explorer

2026-08-31_f5481eaa44be12a522e60bdbd82e3eef_akira_cobalt-strike_rusty-stealer_satacom_vidar

.exe 10.7MB

2026-08-31_f5481eaa44be12a522e60bdbd82e3eef_akira_cobalt-strike_rusty-stealer_satacom_vidar

IMPHASH c778f0bae376dac30beb58044b94c603
SHA256 3c23f65e06b44d6a3a30e75272c164f7fde4c2f4b74b7a027f9af797a2b00d15
MD5 f5481eaa44be12a522e60bdbd82e3eef
SHA1 eede80aea519b5d3db99a5fd92a0fffd167c5373
SHA512 ddd9d52f77eea3867686a8222037ebf92abe4e02e96763048274046f04b67ba2071b910ae8c92ebf4da85411bb5882c15b1f40715949791bd6975414c494e71d
SSDEEP 98304:sx3+UiEAib8QsmicYCduFJXTBWQ8Khj2Ak7wjnsr/eVD94FhUwsLvxIS:sc6AiQQYchduFJXjq2VD94bhS
TLSH
T105B6D725BA5F996CD05BC4B083478A76497130CB0B35B8BF54C496382F6EBF56F2831A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7694928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

markd.pdb

bcryptprimitives

ProcessPrng

advapi32

EventRegister RegCloseKey RegGetValueW EventUnregister RegOpenKeyExW RegQueryValueExW EventSetInformation EventWriteTransfer

ntdll

RtlNtStatusToDosError NtOpenFile NtCreateNamedPipeFile NtWriteFile NtReadFile RtlGetVersion

kernel32

IsDebuggerPresent GetSystemTimeAsFileTime SleepConditionVariableSRW WakeAllConditionVariable LoadLibraryW LoadLibraryA TlsAlloc TlsGetValue TlsSetValue TlsFree InitializeSListHead UnhandledExceptionFilter SetUnhandledExceptionFilter FindNextFileW RtlVirtualUnwind GetCurrentThreadId RtlCaptureContext TerminateProcess RtlUnwindEx GetSystemInfo QueryPerformanceCounter GetSystemTimePreciseAsFileTime WriteFileEx CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW CompareStringOrdinal FreeEnvironmentStringsW CreateThread SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP GetStdHandle WriteConsoleW MultiByteToWideChar QueryPerformanceFrequency SleepEx ReadFileEx IsProcessorFeaturePresent EncodePointer ExitProcess GetTempPathW RaiseException SetEnvironmentVariableW lstrlenW FindClose FindFirstFileExW GetFinalPathNameByHandleW DeleteFileW AcquireSRWLockExclusive GetModuleHandleW SwitchToThread GetFileInformationByHandleEx DeviceIoControl CreateDirectoryW MoveFileExW CopyFileExW RemoveDirectoryW GetCommandLineW GetEnvironmentStringsW GetCurrentDirectoryW OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcessHeap HeapFree LoadLibraryExW ReleaseSRWLockExclusive FreeLibrary SetLastError GetCurrentThread SetThreadStackGuarantee GetUserDefaultUILanguage AddVectoredExceptionHandler WaitForSingleObject DuplicateHandle SetFileInformationByHandle SetFilePointerEx ReleaseMutex GetFullPathNameW CreateMutexA GetCurrentProcessId LCIDToLocaleName WaitForSingleObjectEx RtlPcToFileHeader WideCharToMultiByte GetCurrentProcess HeapReAlloc LoadLibraryExA GetEnvironmentVariableW HeapAlloc InitializeCriticalSectionAndSpinCount GetModuleHandleA Sleep GetProcAddress CloseHandle FormatMessageW DeleteCriticalSection GetFileAttributesW GetFileInformationByHandle GetConsoleMode RtlLookupFunctionEntry CreateFileW

user32

CreateMenu SetMenuItemInfoW AppendMenuW InsertMenuW TrackPopupMenu PostQuitMessage CreateAcceleratorTableW CreatePopupMenu DestroyAcceleratorTable DrawIconEx DrawTextW GetWindowDC OffsetRect GetMenuBarInfo GetMenuItemInfoW DrawMenuBar SetMenu CreateIcon DestroyWindow TranslateAcceleratorW MapVirtualKeyW GetMessageW TranslateMessage DispatchMessageW PostMessageW PostThreadMessageW RedrawWindow GetAsyncKeyState GetKeyboardState SetWindowTextW GetWindowTextW GetWindowTextLengthW SendInput SetForegroundWindow GetMenu IsWindowVisible DefWindowProcW MapVirtualKeyExW FlashWindowEx ChangeDisplaySettingsExW GetKeyboardLayout ToUnicodeEx GetKeyState EnumDisplayMonitors MonitorFromPoint SetWindowDisplayAffinity GetRawInputData SetWindowLongW PeekMessageW GetSystemMenu ClipCursor GetClipCursor ShowCursor DestroyIcon SystemParametersInfoA SetPropW RemoveMenu RegisterRawInputDevices ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx GetWindowPlacement SetWindowPos InvalidateRgn LoadCursorW SetCursor RegisterWindowMessageA SetParent MapWindowPoints GetWindow SetFocus ShowWindow EnableMenuItem EnableWindow IsWindowEnabled GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn RegisterClassExW IsProcessDPIAware GetDC CreateWindowExW GetMessageA DispatchMessageA EnumChildWindows AdjustWindowRect GetForegroundWindow CheckMenuItem RegisterTouchWindow IsWindow AdjustWindowRectEx GetActiveWindow UpdateWindow InvalidateRect SetCursorPos DestroyMenu GetUpdateRect ValidateRect GetMonitorInfoW MonitorFromWindow GetCursorPos GetSystemMetrics CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW FillRect MonitorFromRect ClientToScreen GetClientRect GetWindowLongW ScreenToClient IsIconic SendMessageW SetWindowPlacement ReleaseDC

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

comctl32

DefSubclassProc RemoveWindowSubclass SetWindowSubclass TaskDialogIndirect

ole32

CoCreateFreeThreadedMarshaler RevokeDragDrop RegisterDragDrop CoTaskMemAlloc OleInitialize CoTaskMemFree CoUninitialize CoInitializeEx CoCreateInstance

shlwapi

SHCreateMemStream

gdi32

CreateRectRgn DeleteObject SetTextColor CreateSolidBrush SelectObject CreateDIBSection GetDeviceCaps BitBlt CombineRgn SetBkMode CreateCompatibleDC DeleteDC

dwmapi

DwmGetWindowAttribute DwmEnableBlurBehindWindow DwmSetWindowAttribute

shell32

DragQueryFileW DragFinish SHAppBarMessage SHCreateItemFromParsingName ShellExecuteW SHGetKnownFolderPath

oleaut32

SysStringLen SysFreeString GetErrorInfo SetErrorInfo

api-ms-win-crt-math-l1-1-0

floor round __setusermatherr pow roundf trunc

api-ms-win-crt-string-l1-1-0

strcpy_s _wcsicmp wcscmp wcslen wcsncmp

api-ms-win-crt-convert-l1-1-0

wcstol _ultow_s _wtoi

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _set_app_type exit _seh_filter_exe _initialize_onexit_table _initterm _register_onexit_function _cexit _crt_atexit _c_exit terminate _exit abort _initterm_e __p___argv _register_thread_local_exe_atexit_callback __p___argc

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free _set_new_mode calloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-31_f5481eaa44be12a522e60bdbd82e3eef_akira_cobalt-strike_rusty-stealer_satacom_vidar

bcryptprimitives

advapi32

ntdll

kernel32

user32

api-ms-win-core-synch-l1-2-0

comctl32

ole32

shlwapi

gdi32

dwmapi

shell32

oleaut32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic