Extracted

• • Target
    2026-09-04_73c443d2356ed02a1c5ae2577bcbeadc_akira_rusty-stealer
  • Size 235KB
  • SHA256 bb46295ad86396b4522bcabe1b63dd79e5843ecfb3b557e9988dc43d3cfc4851
  • MD5 73c443d2356ed02a1c5ae2577bcbeadc
  • SHA1 88998dde079cd5cfcfdd6d7d4c43b49c01c6d29d
  • SHA512 11cb43a12b5cd1c2f133bf2386e3fe5bb69c4720f06c001c42c29f882b7a75b6b33030771da9cf5abf5e9644db6e80222f2249de78c9a9715b392cc48fecad8d
  • SSDEEP 6144:gBXlg60v0LEoA69fywdk00pICcJVAe8W8n7RGQ+z:gBXlg60GN0yOVGQ8
  • TLSH
    T176344A117A5A98F8E947D075820AC5736A3678C60B22F8FF01D855393E6BAF17F38B14
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2