2026-09-07_7eb1807e33dea0bf243b7eb6ffe6fffd_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-07_7eb1807e33dea0bf243b7eb6ffe6fffd_akira_rusty-stealer
Size 13.9MB
Sample260908-16c9xsysay
SHA256 39ba0ea2c213440de3473ce73f2b9c8bff6126cdaaaee6431617b62a5d6a745a
MD5 7eb1807e33dea0bf243b7eb6ffe6fffd
SHA1 474211d231ad2691b4ed36be7df17a1506cdce02
SHA512 2ad2c5ce24c017d576440d9808a7bdf8e48066b26a69d06698f8a6ae1cadf8d5d34738650b93f648e77409f54d17dc045f768f71a2c0abae683448d875919c3d
SSDEEP 196608:WxVaHSBbTRBGPxhw/5j7kJiON+qpCE/rbrFBWJ/AH9jwn64:mVaHSBbTRBGPxhw/57OIqpCgbT8YdUD
TLSH
T1D2E639257B5B996CD09BC47483478A62493030DB0B39B9FF449896382F7EBF46F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-07_7eb1807e33dea0bf243b7eb6ffe6fffd_akira_rusty-stealer

File Explorer

2026-09-07_7eb1807e33dea0bf243b7eb6ffe6fffd_akira_rusty-stealer

.exe 13.9MB

2026-09-07_7eb1807e33dea0bf243b7eb6ffe6fffd_akira_rusty-stealer

IMPHASH 8cbb7df928769a2c450a07f90b77b7c7
SHA256 39ba0ea2c213440de3473ce73f2b9c8bff6126cdaaaee6431617b62a5d6a745a
MD5 7eb1807e33dea0bf243b7eb6ffe6fffd
SHA1 474211d231ad2691b4ed36be7df17a1506cdce02
SHA512 2ad2c5ce24c017d576440d9808a7bdf8e48066b26a69d06698f8a6ae1cadf8d5d34738650b93f648e77409f54d17dc045f768f71a2c0abae683448d875919c3d
SSDEEP 196608:WxVaHSBbTRBGPxhw/5j7kJiON+qpCE/rbrFBWJ/AH9jwn64:mVaHSBbTRBGPxhw/57OIqpCgbT8YdUD
TLSH
T1D2E639257B5B996CD09BC47483478A62493030DB0B39B9FF449896382F7EBF46F38259
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7460096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wujin_studio.pdb

bcryptprimitives

ProcessPrng

advapi32

RegQueryValueExW RegSetValueExW RegGetValueW RegCloseKey EventRegister EventSetInformation EventWriteTransfer EventUnregister RegDeleteValueW RegOpenKeyExW RegEnumKeyExW

ntdll

NtOpenFile RtlNtStatusToDosError NtReadFile NtCreateNamedPipeFile NtWriteFile RtlGetVersion

kernel32

EncodePointer TlsAlloc IsDebuggerPresent GetSystemTimeAsFileTime SleepConditionVariableSRW LoadLibraryA LCIDToLocaleName GetUserDefaultUILanguage TlsGetValue TlsSetValue TlsFree InitializeSListHead UnhandledExceptionFilter GetTempPathW WaitForMultipleObjects SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetEnvironmentVariableW DeleteFileW GetFinalPathNameByHandleW RaiseException RtlPcToFileHeader ReleaseMutex CreateMutexA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess SetUnhandledExceptionFilter FindClose FindFirstFileExW CopyFileExW LoadLibraryW GetCommandLineW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler lstrlenW CreateDirectoryW GetStdHandle GetEnvironmentStringsW TerminateProcess GetProcessId GetExitCodeProcess WakeAllConditionVariable AcquireSRWLockExclusive CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx CancelIo GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess FlushFileBuffers GetOverlappedResult ReadFile ReadFileEx OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcessHeap HeapFree LoadLibraryExW GetModuleHandleW FreeLibrary GetCurrentProcessId SetHandleInformation RtlUnwindEx CreateEventW CreateThread QueryPerformanceCounter ReleaseSRWLockExclusive GetCurrentThreadId QueryPerformanceFrequency HeapReAlloc SetFileTime SetFileInformationByHandle GetFullPathNameW SetLastError SleepEx WriteFileEx FreeEnvironmentStringsW WaitForSingleObject CompareStringOrdinal GetEnvironmentVariableW GetModuleHandleA Sleep GetProcAddress CloseHandle CreateFileW DeleteCriticalSection IsProcessorFeaturePresent GetTimeZoneInformationForYear InitializeCriticalSectionAndSpinCount LoadLibraryExA HeapAlloc GetConsoleMode FormatMessageW SetFilePointerEx GetFileInformationByHandle GetFileAttributesW FindNextFileW MoveFileExW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

user32

RemoveMenu AppendMenuW InsertMenuW CheckMenuItem SetMenuItemInfoW CreateAcceleratorTableW GetMessageA DestroyAcceleratorTable TranslateMessage DrawMenuBar CreatePopupMenu CreateMenu DrawIconEx DrawTextW GetWindowDC OffsetRect GetMenuBarInfo GetMenuItemInfoW DispatchMessageA EnumChildWindows SetTimer IsIconic KillTimer TrackPopupMenu ChangeWindowMessageFilterEx RegisterClassW PostQuitMessage CreateIcon ToUnicodeEx MapVirtualKeyExW GetKeyState DestroyMenu SendMessageW GetAsyncKeyState GetKeyboardState SetWindowLongW EnableMenuItem GetSystemMenu SystemParametersInfoA SetPropW VkKeyScanW SetForegroundWindow SetWindowTextW GetWindowTextW GetWindowTextLengthW GetMenu AdjustWindowRectEx ClipCursor IsWindow GetClipCursor IsWindowVisible EnumDisplayMonitors MonitorFromPoint SetWindowDisplayAffinity GetRawInputData GetKeyboardLayout DestroyIcon ReleaseCapture SetCapture GetSystemMetrics RegisterTouchWindow MsgWaitForMultipleObjectsEx SetWindowPos CreateWindowExW RegisterRawInputDevices RegisterClassExW SetMenu GetMessageW DispatchMessageW PostMessageW ShowCursor GetWindow SetParent MapWindowPoints SetFocus ShowWindow RedrawWindow ReleaseDC GetDC IsProcessDPIAware EnableWindow IsWindowEnabled GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn AdjustWindowRect SendInput DestroyWindow MapVirtualKeyW CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW FillRect GetMonitorInfoW MonitorFromRect MonitorFromWindow GetCursorPos GetClientRect GetWindowLongW ScreenToClient GetUpdateRect ValidateRect TranslateAcceleratorW GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos PostThreadMessageW ClientToScreen FlashWindowEx SetCursor LoadCursorW InvalidateRgn SetWindowPlacement GetWindowPlacement PeekMessageW ChangeDisplaySettingsExW DefWindowProcW RegisterWindowMessageA

ole32

CoTaskMemAlloc CoInitializeEx OleInitialize CoCreateFreeThreadedMarshaler RegisterDragDrop CoUninitialize CoTaskMemFree CoCreateInstance RevokeDragDrop

shell32

SHCreateItemFromParsingName SHGetKnownFolderPath ShellExecuteW DragQueryFileW DragFinish Shell_NotifyIconGetRect SHAppBarMessage Shell_NotifyIconW

gdi32

SetBkMode SetTextColor CombineRgn DeleteDC DeleteObject CreateSolidBrush CreateRectRgn SelectObject CreateDIBSection GetDeviceCaps CreateCompatibleDC BitBlt

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow DwmGetWindowAttribute

comctl32

RemoveWindowSubclass DefSubclassProc TaskDialogIndirect SetWindowSubclass

shlwapi

SHCreateMemStream

oleaut32

SysStringLen SysFreeString GetErrorInfo SetErrorInfo

ws2_32

send recv ioctlsocket setsockopt WSACleanup WSAStartup closesocket getsockopt connect select WSASocketW WSAGetLastError

api-ms-win-crt-math-l1-1-0

__setusermatherr fmod roundf pow floor round trunc

api-ms-win-crt-string-l1-1-0

strcmp wcsncmp _wcsicmp strlen wcscmp wcslen strcpy_s

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi

api-ms-win-crt-runtime-l1-1-0

_c_exit _initterm _exit _cexit _register_thread_local_exe_atexit_callback _initterm_e _get_initial_narrow_environment _initialize_onexit_table _initialize_narrow_environment _register_onexit_function _configure_narrow_argv _set_app_type _crt_atexit abort _seh_filter_exe __p___argc exit terminate __p___argv

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode calloc malloc _callnewh

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-07_7eb1807e33dea0bf243b7eb6ffe6fffd_akira_rusty-stealer

bcryptprimitives

advapi32

ntdll

kernel32

api-ms-win-core-synch-l1-2-0

user32

ole32

shell32

gdi32

dwmapi

comctl32

shlwapi

oleaut32

ws2_32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic