2026-09-22_a78a6fccb081ed007aca97bc17e2e9a2_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-22_a78a6fccb081ed007aca97bc17e2e9a2_akira_cobalt-strike_rusty-stealer_satacom
Size 272KB
Sample260922-wt2drscd35
SHA256 7a5811030f55664d8cc047277118363c8a15442385c07bfd3c9deaa1ed83b2d7
MD5 a78a6fccb081ed007aca97bc17e2e9a2
SHA1 ce94fdfe6b0bc5386cf0f0673cacaa4aea319f22
SHA512 54978f769713b4d0c727f80977c8638efe14f4dd17872357546867a9408027d235f57abffd4562cb91742b6da4ac8852fc6d51030030256477da915f3248649d
SSDEEP 6144:Q8/lby52w0G0Evv7IPC7x2H3pzhywbvG:NNmEZEvv7fxc3Nhywb
TLSH
T1B2547DDFFFC119E8E45A80BF820595629A277C4D1711A9EB2E5431206E76FE12F7CB08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-22_a78a6fccb081ed007aca97bc17e2e9a2_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-09-22_a78a6fccb081ed007aca97bc17e2e9a2_akira_cobalt-strike_rusty-stealer_satacom

.exe 272KB

2026-09-22_a78a6fccb081ed007aca97bc17e2e9a2_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 7e54dd98208b2bb738e9c086e2d79245
SHA256 7a5811030f55664d8cc047277118363c8a15442385c07bfd3c9deaa1ed83b2d7
MD5 a78a6fccb081ed007aca97bc17e2e9a2
SHA1 ce94fdfe6b0bc5386cf0f0673cacaa4aea319f22
SHA512 54978f769713b4d0c727f80977c8638efe14f4dd17872357546867a9408027d235f57abffd4562cb91742b6da4ac8852fc6d51030030256477da915f3248649d
SSDEEP 6144:Q8/lby52w0G0Evv7IPC7x2H3pzhywbvG:NNmEZEvv7fxc3Nhywb
TLSH
T1B2547DDFFFC119E8E45A80BF820595629A277C4D1711A9EB2E5431206E76FE12F7CB08
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

144192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kbx7j_a2y9.pdb

kernel32

LoadLibraryW GetModuleHandleW GetProcAddress VirtualProtect GetProcessHeap HeapFree QueryPerformanceFrequency HeapCreate HeapAlloc EnumSystemGeoID GetLastError HeapReAlloc AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentThreadId SetLastError GetEnvironmentVariableW GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA lstrlenW GetCurrentProcessId CreateMutexA CloseHandle ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP WaitForSingleObject MultiByteToWideChar WriteConsoleW FormatMessageW QueryPerformanceCounter GetModuleHandleA SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime

ntdll

RtlNtStatusToDosError NtWriteFile

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

vcruntime140

__current_exception_context __current_exception memcpy memset __CxxFrameHandler3 memcmp memmove __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

exit _exit _initterm __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _initialize_onexit_table _register_onexit_function _crt_atexit terminate _set_app_type _seh_filter_exe _initterm_e

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-22_a78a6fccb081ed007aca97bc17e2e9a2_akira_cobalt-strike_rusty-stealer_satacom

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic