2026-09-16_fe7531d9845228a8afb2853422fe7c47_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_fe7531d9845228a8afb2853422fe7c47_akira_rusty-stealer
Size 523KB
Sample260916-se4c2asapd
SHA256 a722a4e83b496968defa600282c61db2e8a6c78ec1edfef91d9a9318a2afbe12
MD5 fe7531d9845228a8afb2853422fe7c47
SHA1 50a9156b1db9b92c5a47f909d15d1a4be30eb9c9
SHA512 7707a28066fea9a228c1c04558bcf6f72616d4e351450207720a87a6f35b08fbff44a944f2157dd22eab5bc275af5eab9f5b05e68b82d941a7a4ceb9a84ad2da
SSDEEP 6144:xD6d/Y+UyjOzTcVv6BLnFIvixMr4FDuRCtMc4I2HsE+dSQKHGhDkN9zkLzTjRMFv:qVnSzYV4siesFDQHsEZhZMLzTtxGE
TLSH
T15CB41223779441FDE00AC03CA31482B2A6AB75D91F2356EF273845781F56EF62F3AA45
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_fe7531d9845228a8afb2853422fe7c47_akira_rusty-stealer

File Explorer

2026-09-16_fe7531d9845228a8afb2853422fe7c47_akira_rusty-stealer

.exe 523KB

2026-09-16_fe7531d9845228a8afb2853422fe7c47_akira_rusty-stealer

IMPHASH b07790741597ea3faa530581cdafdff7
SHA256 a722a4e83b496968defa600282c61db2e8a6c78ec1edfef91d9a9318a2afbe12
MD5 fe7531d9845228a8afb2853422fe7c47
SHA1 50a9156b1db9b92c5a47f909d15d1a4be30eb9c9
SHA512 7707a28066fea9a228c1c04558bcf6f72616d4e351450207720a87a6f35b08fbff44a944f2157dd22eab5bc275af5eab9f5b05e68b82d941a7a4ceb9a84ad2da
SSDEEP 6144:xD6d/Y+UyjOzTcVv6BLnFIvixMr4FDuRCtMc4I2HsE+dSQKHGhDkN9zkLzTjRMFv:qVnSzYV4siesFDQHsEZhZMLzTtxGE
TLSH
T15CB41223779441FDE00AC03CA31482B2A6AB75D91F2356EF273845781F56EF62F3AA45
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

74928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wrapped.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

kernel32

GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler WaitForSingleObject GetProcessHeap InitializeSListHead LoadLibraryA VirtualAlloc HeapFree GetLastError IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter FormatMessageW LoadLibraryExA GetModuleHandleA HeapAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent GetConsoleOutputCP GetConsoleMode GetStdHandle RtlVirtualUnwind WideCharToMultiByte ReleaseMutex GetCurrentThreadId CloseHandle CreateMutexA GetCurrentProcessId lstrlenW GetCurrentProcess WaitForSingleObjectEx RtlLookupFunctionEntry RtlCaptureContext HeapReAlloc GetSystemTimeAsFileTime GetCurrentDirectoryW GetEnvironmentVariableW GetProcAddress SetLastError CreateThread QueryPerformanceCounter GetModuleHandleW

ntdll

NtWriteFile RtlNtStatusToDosError

oleaut32

SysFreeString SysStringLen

vcruntime140

memset memcpy memcmp memmove __current_exception_context __current_exception __C_specific_handler __CxxFrameHandler3

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_crt_atexit terminate _register_onexit_function _initialize_onexit_table _set_app_type _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _configure_narrow_argv _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_fe7531d9845228a8afb2853422fe7c47_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

oleaut32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic