2026-09-16_aa43af5042b87333f4d738a5a7d7d4ec_akira_icedid_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_aa43af5042b87333f4d738a5a7d7d4ec_akira_icedid_rusty-stealer
Size 10.6MB
Sample260916-wxpjdatemb
SHA256 238b20f879fbc83bfc558438bfd8da2f5e14da34eb2a6c741b62139d4b9154f3
MD5 aa43af5042b87333f4d738a5a7d7d4ec
SHA1 192bb997cc19777efbb37642f106ca570123b033
SHA512 fe1d55c73cfef917eede9dfb375d1e65df9e7b10d46d9889c220597d2666869900052a30cba9fef589cebde5883f0d41212e85960cffd812a2613c18c27195b1
SSDEEP 196608:XclUln9T75xZszJ5/t8L6/8XW92JTYxhffMOcJWpCKRCXs0H2xnfuTF:6UlFF01k2kXZJTMlfBcspdCXs0H2Ffuh
TLSH
T13BB63362B248A6FDE08585B4C2028912A9777E9A07516EFF2FAC47740F469D27F2DD30
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_aa43af5042b87333f4d738a5a7d7d4ec_akira_icedid_rusty-stealer

File Explorer

2026-09-16_aa43af5042b87333f4d738a5a7d7d4ec_akira_icedid_rusty-stealer

.exe 10.6MB

2026-09-16_aa43af5042b87333f4d738a5a7d7d4ec_akira_icedid_rusty-stealer

IMPHASH c2b73ebfd3b609f6c51a434198ffc5ca
SHA256 238b20f879fbc83bfc558438bfd8da2f5e14da34eb2a6c741b62139d4b9154f3
MD5 aa43af5042b87333f4d738a5a7d7d4ec
SHA1 192bb997cc19777efbb37642f106ca570123b033
SHA512 fe1d55c73cfef917eede9dfb375d1e65df9e7b10d46d9889c220597d2666869900052a30cba9fef589cebde5883f0d41212e85960cffd812a2613c18c27195b1
SSDEEP 196608:XclUln9T75xZszJ5/t8L6/8XW92JTYxhffMOcJWpCKRCXs0H2xnfuTF:6UlFF01k2kXZJTMlfBcspdCXs0H2Ffuh
TLSH
T13BB63362B248A6FDE08585B4C2028912A9777E9A07516EFF2FAC47740F469D27F2DD30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

84592

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetLastError GetCurrentProcessId GetModuleHandleW GetCommandLineW GetFileAttributesW GetFileSize AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentThreadId SetLastError GetEnvironmentVariableW GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress GetCurrentProcess HeapReAlloc CreateMutexA CloseHandle ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP WaitForSingleObject MultiByteToWideChar WriteConsoleW HeapAlloc GetModuleHandleA ExitProcess CreateFileW SetFilePointerEx HeapFree lstrlenW GetProcessHeap FlushFileBuffers HeapSize LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent RtlUnwindEx EncodePointer RaiseException EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RtlPcToFileHeader WriteFile GetModuleFileNameW TerminateProcess GetModuleHandleExW GetCommandLineA FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree

user32

GetCaretBlinkTime GetKeyboardLayout GetSystemMetrics

advapi32

GetUserNameW RegCloseKey

shell32

SHGetFileInfoW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ntdll

RtlNtStatusToDosError NtWriteFile

Name

.init

Size

137KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.init2

Size

512B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.cdata

Size

10.4MB

Virtual Size

10.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.qrsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.freloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_aa43af5042b87333f4d738a5a7d7d4ec_akira_icedid_rusty-stealer

kernel32

user32

advapi32

shell32

api-ms-win-core-synch-l1-2-0

ntdll

generic