2026-09-12_3edd17f0306e1d1479b8af9ef44484bc_akira_cobalt-strike_icedid_rusty-stealer

General

Target
2026-09-12_3edd17f0306e1d1479b8af9ef44484bc_akira_cobalt-strike_icedid_rusty-stealer
Size 598KB
Sample260913-dm7m4aec99
SHA256 e46526decb02bbaee31b5eac615f2d6b7df750043b9577f91fdf2befe244778a
MD5 3edd17f0306e1d1479b8af9ef44484bc
SHA1 beb70d38e3a415a0bec2a0e400350e5e96d702a4
SHA512 609f03f3250330668b934603ef534814fec6dbda725f5b2e716c16dd630ed4b45df90eea12b902ead32528a461ad310ce9391535ba557a225cd1e3f54e292d14
SSDEEP 12288:hOvA5nG84fnFFrcJeiZpg2pMSFYt6TZxKTTS7btVfZAl9guXU:hOC4fLcJeihCWYt6lccxVfZAk
TLSH
T1D4D4F10DFA6894FDC852957B848600A1B3E1FC13CB2055EF47E106562E2FEE52E7DBA0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-12_3edd17f0306e1d1479b8af9ef44484bc_akira_cobalt-strike_icedid_rusty-stealer

File Explorer

2026-09-12_3edd17f0306e1d1479b8af9ef44484bc_akira_cobalt-strike_icedid_rusty-stealer

.exe 598KB

2026-09-12_3edd17f0306e1d1479b8af9ef44484bc_akira_cobalt-strike_icedid_rusty-stealer

IMPHASH b238ff1803c00a2e504cf204a01695a7
SHA256 e46526decb02bbaee31b5eac615f2d6b7df750043b9577f91fdf2befe244778a
MD5 3edd17f0306e1d1479b8af9ef44484bc
SHA1 beb70d38e3a415a0bec2a0e400350e5e96d702a4
SHA512 609f03f3250330668b934603ef534814fec6dbda725f5b2e716c16dd630ed4b45df90eea12b902ead32528a461ad310ce9391535ba557a225cd1e3f54e292d14
SSDEEP 12288:hOvA5nG84fnFFrcJeiZpg2pMSFYt6TZxKTTS7btVfZAl9guXU:hOC4fLcJeihCWYt6lccxVfZAk
TLSH
T1D4D4F10DFA6894FDC852957B848600A1B3E1FC13CB2055EF47E106562E2FEE52E7DBA0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

47680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rhuaghaeceuch.pdb

kernel32

GetThreadLocale GetUserDefaultUILanguage GetCurrentThread GetUserDefaultLCID GetSystemDefaultLangID IsDBCSLeadByte GetFileAttributesW GetLogicalDriveStringsW GetModuleHandleA GetProcAddress GetFileInformationByHandle GetFileInformationByHandleEx CloseHandle LoadLibraryA GetProcessHeap HeapAlloc GetCPInfo GetEnvironmentStringsW GetCommandLineA GetCommandLineW GetModuleHandleW GetDriveTypeW GetSystemDefaultUILanguage MultiByteToWideChar WriteConsoleW CreateFileW SetFileTime GetLastError SetLastError GetFullPathNameW HeapFree SetFileInformationByHandle HeapReAlloc TryAcquireSRWLockExclusive GetStdHandle GetConsoleMode ReleaseSRWLockExclusive WaitForSingleObject SetFilePointerEx GetConsoleOutputCP FlushFileBuffers HeapSize QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent RtlUnwindEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP WideCharToMultiByte FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW WriteFile

user32

GetSystemMetrics GetSysColor

ntdll

RtlNtStatusToDosError RtlGetVersion NtReadFile NtWriteFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-12_3edd17f0306e1d1479b8af9ef44484bc_akira_cobalt-strike_icedid_rusty-stealer

kernel32

user32

ntdll

generic