2026-09-10_663a23f7d90b87f8bf3b15b3fa186628_akira_cobalt-strike_icedid_rusty-stealer

General

Target
2026-09-10_663a23f7d90b87f8bf3b15b3fa186628_akira_cobalt-strike_icedid_rusty-stealer
Size 511KB
Sample260910-td8rsst1cy
SHA256 8e25ba03d698b0302d85121ded906efa3d44c4fdf25eec0ef98982d47a3dd657
MD5 663a23f7d90b87f8bf3b15b3fa186628
SHA1 2d298da990cdb10e68b204bb8a71499e5e138c61
SHA512 0b58669ba2776f1f5ab5879fc9cbb3afbe0d6ae66fdc5b8cbe9ffbc7bbe4c00c8a37e868ebc2a09939889a3cbde6af5fed8c740bd7cbc4489bded342e09ddfc0
SSDEEP 12288:Heu9jumngXSmq2iabJIF3nK/+2UANn0S4gOylqj:VkmgG+c3K2bSlDl
TLSH
T1BAB4F1A2FB8D1BEDD169857C88622605ABB2B9126B62D5DF47E1014B1F376C05F3BF00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-10_663a23f7d90b87f8bf3b15b3fa186628_akira_cobalt-strike_icedid_rusty-stealer

File Explorer

2026-09-10_663a23f7d90b87f8bf3b15b3fa186628_akira_cobalt-strike_icedid_rusty-stealer

.exe 511KB

2026-09-10_663a23f7d90b87f8bf3b15b3fa186628_akira_cobalt-strike_icedid_rusty-stealer

IMPHASH afd82dc4c88b373fec821c358ec55fb6
SHA256 8e25ba03d698b0302d85121ded906efa3d44c4fdf25eec0ef98982d47a3dd657
MD5 663a23f7d90b87f8bf3b15b3fa186628
SHA1 2d298da990cdb10e68b204bb8a71499e5e138c61
SHA512 0b58669ba2776f1f5ab5879fc9cbb3afbe0d6ae66fdc5b8cbe9ffbc7bbe4c00c8a37e868ebc2a09939889a3cbde6af5fed8c740bd7cbc4489bded342e09ddfc0
SSDEEP 12288:Heu9jumngXSmq2iabJIF3nK/+2UANn0S4gOylqj:VkmgG+c3K2bSlDl
TLSH
T1BAB4F1A2FB8D1BEDD169857C88622605ABB2B9126B62D5DF47E1014B1F376C05F3BF00
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

50464

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

mciotzuiss.pdb

kernel32

GetConsoleMode ReleaseSRWLockExclusive CreateFileW SetFileTime GetLastError CloseHandle SetLastError GetFullPathNameW SetFileInformationByHandle GetModuleHandleA GetProcAddress QueryPerformanceFrequency QueryPerformanceCounter GetActiveProcessorCount GetActiveProcessorGroupCount GetSystemTimeAsFileTime GetTickCount64 GetFileInformationByHandle GetFileInformationByHandleEx TryAcquireSRWLockExclusive HeapAlloc HeapFree MultiByteToWideChar IsValidCodePage IsDBCSLeadByte GetSystemWindowsDirectoryW GetTempPathW GetCurrentDirectoryW GetSystemDirectoryW LoadLibraryA HeapReAlloc WaitForSingleObject GetStdHandle GetConsoleWindow GetConsoleCP GetConsoleOutputCP GetCurrentProcessorNumber GetMaximumProcessorCount GetFileType GetCurrentThread GetProcessHeap WriteConsoleW SetFilePointerEx GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW GetACP GetOEMCP GetCPInfo WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW HeapSize FlushFileBuffers WriteFile

ntdll

NtWriteFile RtlNtStatusToDosError NtReadFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-10_663a23f7d90b87f8bf3b15b3fa186628_akira_cobalt-strike_icedid_rusty-stealer

kernel32

ntdll

generic