2026-09-07_4aeea04a5ee778d0059869e848d4eaa3_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-07_4aeea04a5ee778d0059869e848d4eaa3_akira_rusty-stealer
Size 152KB
Sample260909-cppdvsaq4x
SHA256 3b897850ea389769fc386c85e04fed97e14d6559fffd7282a1e8c1fee2e76977
MD5 4aeea04a5ee778d0059869e848d4eaa3
SHA1 4dcdb329e7aabab032ca0f8c463f1f84eb6810b3
SHA512 2f90a5bf2eed9f0ec4069397872bfcb4ffe887ad31600e08ab4941364a08b89c2663e2286edd40efc265ed7347e7756d2042cb23c5598458e5c00dc42ef55605
SSDEEP 3072:iVRUe0kug1lRCpo/w6uh5AK3+e8UY6+WSvm:iTUe0kuuGoI6S5ga
TLSH
T13AE39E02BB4151EDD41EC074C26549B7B372B4C90B31ABFF13A552382EAADE66F38764
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-07_4aeea04a5ee778d0059869e848d4eaa3_akira_rusty-stealer

File Explorer

2026-09-07_4aeea04a5ee778d0059869e848d4eaa3_akira_rusty-stealer

.exe 152KB

2026-09-07_4aeea04a5ee778d0059869e848d4eaa3_akira_rusty-stealer

IMPHASH 54aceceb322d3c97375af4d9f4aeb96b
SHA256 3b897850ea389769fc386c85e04fed97e14d6559fffd7282a1e8c1fee2e76977
MD5 4aeea04a5ee778d0059869e848d4eaa3
SHA1 4dcdb329e7aabab032ca0f8c463f1f84eb6810b3
SHA512 2f90a5bf2eed9f0ec4069397872bfcb4ffe887ad31600e08ab4941364a08b89c2663e2286edd40efc265ed7347e7756d2042cb23c5598458e5c00dc42ef55605
SSDEEP 3072:iVRUe0kug1lRCpo/w6uh5AK3+e8UY6+WSvm:iTUe0kuuGoI6S5ga
TLSH
T13AE39E02BB4151EDD41EC074C26549B7B372B4C90B31ABFF13A552382EAADE66F38764
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

128000

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetModuleHandleW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetLastError CloseHandle WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP IsProcessorFeaturePresent GetModuleHandleA GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp __current_exception_context memset _CxxThrowException __C_specific_handler __current_exception memcpy memmove __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _seh_filter_exe _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-07_4aeea04a5ee778d0059869e848d4eaa3_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic