2026-09-08_708db7a98f863afd8dbbdcdb4b703a6f_akira_icedid_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-08_708db7a98f863afd8dbbdcdb4b703a6f_akira_icedid_rusty-stealer
Size 1.6MB
Sample260910-fms6taff49
SHA256 23f03a8f3bf2f3df60d19d532b41265e3b9b1c60ce1fee0381a34b2c10caa9c6
MD5 708db7a98f863afd8dbbdcdb4b703a6f
SHA1 d1ddc95b3b3409ee0347ebef41a2fceac8f95615
SHA512 ef9b72974be634d9e0802cfbea6dfed1f440b264daabc7489d5160e429d15495e1508c8b45ce87064b3960827c60ca62905f78e74d0d801e6bd10705115ff241
SSDEEP 12288:pJMWdeoJYpQ22qH9+bB0OmH7TkKhar9E5pZCX4FlRzgRwCY4+11iLy7mxpIzG:pJqoai22C9+bmOmbTk3reZCIT59z7m
TLSH
T10D75F111B78648FDDC6FC03CC2454562B632B8D94B22EAEF4754062A2E67EF19E3CB54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-08_708db7a98f863afd8dbbdcdb4b703a6f_akira_icedid_rusty-stealer

File Explorer

2026-09-08_708db7a98f863afd8dbbdcdb4b703a6f_akira_icedid_rusty-stealer

.exe 1.6MB

2026-09-08_708db7a98f863afd8dbbdcdb4b703a6f_akira_icedid_rusty-stealer

IMPHASH 68c1093a5f04eaedc6e57c7f6578fdba
SHA256 23f03a8f3bf2f3df60d19d532b41265e3b9b1c60ce1fee0381a34b2c10caa9c6
MD5 708db7a98f863afd8dbbdcdb4b703a6f
SHA1 d1ddc95b3b3409ee0347ebef41a2fceac8f95615
SHA512 ef9b72974be634d9e0802cfbea6dfed1f440b264daabc7489d5160e429d15495e1508c8b45ce87064b3960827c60ca62905f78e74d0d801e6bd10705115ff241
SSDEEP 12288:pJMWdeoJYpQ22qH9+bB0OmH7TkKhar9E5pZCX4FlRzgRwCY4+11iLy7mxpIzG:pJqoai22C9+bmOmbTk3reZCIT59z7m
TLSH
T10D75F111B78648FDDC6FC03CC2454562B632B8D94B22EAEF4754062A2E67EF19E3CB54
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

124432

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

audio_effects_helper.pdb

ole32

CoCreateInstance CoInitializeEx CoUninitialize CoTaskMemFree

kernel32

GetStdHandle GetConsoleMode SetStdHandle SetErrorMode WaitForSingleObject GetProcessHeap HeapFree HeapAlloc FlsFree LoadLibraryExA FormatMessageW FlsGetValue FlsSetValue FlsAlloc GetLastError GetModuleHandleExW QueryPerformanceCounter GetSystemTimeAsFileTime IsDebuggerPresent GetStartupInfoW IsProcessorFeaturePresent EncodePointer RaiseException TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RtlPcToFileHeader GetModuleHandleW HeapSize LCMapStringW CompareStringW FindNextFileW VirtualProtect RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess InitializeCriticalSectionEx GetStringTypeW GetCPInfo GetOEMCP GetACP IsValidCodePage GetCommandLineA WriteFile InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection FreeEnvironmentStringsW EnterCriticalSection RtlUnwindEx SetUnhandledExceptionFilter UnhandledExceptionFilter InitializeSListHead GetConsoleOutputCP WriteConsoleW MultiByteToWideChar ExitProcess GetModuleFileNameW GetModuleHandleA HeapReAlloc CloseHandle lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx FlushFileBuffers AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetCommandLineW CreateFileW FindFirstFileExW FindClose GetFileType SetEnvironmentVariableW GetCurrentThreadId

oleaut32

GetErrorInfo SysStringLen SysFreeString

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ntdll

RtlNtStatusToDosError NtWriteFile

Name

.text

Size

179KB

Virtual Size

178KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1.3MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-08_708db7a98f863afd8dbbdcdb4b703a6f_akira_icedid_rusty-stealer

ole32

kernel32

oleaut32

api-ms-win-core-synch-l1-2-0

ntdll

generic