2026-09-10_09c0345311a8813b51d4368802f4fcee_akira_cobalt-strike_icedid_rusty-stealer

General

Target
2026-09-10_09c0345311a8813b51d4368802f4fcee_akira_cobalt-strike_icedid_rusty-stealer
Size 497KB
Sample260910-y3nkdawamd
SHA256 d1ff9645e0b01a6d8426c72b021d6c48754b65b49b055e140d4de4c0475eb817
MD5 09c0345311a8813b51d4368802f4fcee
SHA1 56ef27084ecf760c21896d90f947d6bcbd750426
SHA512 caaf34fdd304b22a40a61df880d04cb0e69388d263155d7fb86be9b0bf9054dcf856dd20905f90126622d754b2286d0dfbc52ac05f51d4e6877865275e4d524c
SSDEEP 12288:WUvRMYWROHham+dQ2dJBa8LFxPvhYW8AR:WUvRUmB+ddrxPXR
TLSH
T1DEB4F166F39417F8C45AC27A89956A41F2B278569F818AEF43A006831F777D13E3EF10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-10_09c0345311a8813b51d4368802f4fcee_akira_cobalt-strike_icedid_rusty-stealer

File Explorer

2026-09-10_09c0345311a8813b51d4368802f4fcee_akira_cobalt-strike_icedid_rusty-stealer

.exe 497KB

2026-09-10_09c0345311a8813b51d4368802f4fcee_akira_cobalt-strike_icedid_rusty-stealer

IMPHASH 8b5ea21fe58ce750f4400dd75a69ad67
SHA256 d1ff9645e0b01a6d8426c72b021d6c48754b65b49b055e140d4de4c0475eb817
MD5 09c0345311a8813b51d4368802f4fcee
SHA1 56ef27084ecf760c21896d90f947d6bcbd750426
SHA512 caaf34fdd304b22a40a61df880d04cb0e69388d263155d7fb86be9b0bf9054dcf856dd20905f90126622d754b2286d0dfbc52ac05f51d4e6877865275e4d524c
SSDEEP 12288:WUvRMYWROHham+dQ2dJBa8LFxPvhYW8AR:WUvRUmB+ddrxPXR
TLSH
T1DEB4F166F39417F8C45AC27A89956A41F2B278569F818AEF43A006831F777D13E3EF10
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

46608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

glieundauect.pdb

kernel32

GetModuleHandleW GetModuleHandleA GetEnvironmentStringsW GetCommandLineW WaitForSingleObject SetFileInformationByHandle GetLastError CloseHandle GetTempPathW GetSystemDirectoryW GetCommandLineA IsThreadAFiber GetThreadId GetWindowsDirectoryW GetSystemWindowsDirectoryW GetProcessHeap HeapAlloc MultiByteToWideChar HeapFree CreateFileW SetFileTime SetLastError GetFullPathNameW GetCurrentProcessorNumber GetActiveProcessorGroupCount LoadLibraryA GetProcAddress GetFileInformationByHandle GetFileInformationByHandleEx TryAcquireSRWLockExclusive GetStdHandle GetConsoleMode ReleaseSRWLockExclusive GetCurrentThread HeapReAlloc WriteConsoleW SetFilePointerEx GetConsoleOutputCP FlushFileBuffers HeapSize QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent RtlUnwindEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WideCharToMultiByte FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW WriteFile

ntdll

NtWriteFile RtlNtStatusToDosError NtReadFile

user32

GetCaretBlinkTime GetSystemMetrics GetSysColor

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-10_09c0345311a8813b51d4368802f4fcee_akira_cobalt-strike_icedid_rusty-stealer

kernel32

ntdll

user32

generic