2026-09-25_e0448e02d5bb22cd2d741a10f5fa5a32_akira_cobalt-strike_icedid_rusty-stealer

General

Target
2026-09-25_e0448e02d5bb22cd2d741a10f5fa5a32_akira_cobalt-strike_icedid_rusty-stealer
Size 778KB
Sample260925-w6e2asxtaw
SHA256 65fef9c8a13911279ba3db70db5f7918d08b2043103696c8c4bb326a10567880
MD5 e0448e02d5bb22cd2d741a10f5fa5a32
SHA1 afa73e2f0ffe1563d632fa67ac39c8d2e5c3e342
SHA512 918468f22319d52b7a8de63b9db13a42c95bbe0561874e45e10a5d0bed5017c761f196fd87b0d1383465363fc0086e9020d95aaeee6d31cbc1616ab87c895dcd
SSDEEP 12288:DY7NxlDWRoizlYBJdWB/SpOaQiuDcP3okpWlfdamn8jO3rxI0NetyWSz:ANxbUYTOasDcvokGn8A60NU
TLSH
T10B05010D6ABD42FBC452213C845146033AA0BC8543F8DFFB079B40673E769A94A7DEE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-25_e0448e02d5bb22cd2d741a10f5fa5a32_akira_cobalt-strike_icedid_rusty-stealer

File Explorer

2026-09-25_e0448e02d5bb22cd2d741a10f5fa5a32_akira_cobalt-strike_icedid_rusty-stealer

.exe 778KB

2026-09-25_e0448e02d5bb22cd2d741a10f5fa5a32_akira_cobalt-strike_icedid_rusty-stealer

IMPHASH 2f6ed0e713f15332c5803954f40d854e
SHA256 65fef9c8a13911279ba3db70db5f7918d08b2043103696c8c4bb326a10567880
MD5 e0448e02d5bb22cd2d741a10f5fa5a32
SHA1 afa73e2f0ffe1563d632fa67ac39c8d2e5c3e342
SHA512 918468f22319d52b7a8de63b9db13a42c95bbe0561874e45e10a5d0bed5017c761f196fd87b0d1383465363fc0086e9020d95aaeee6d31cbc1616ab87c895dcd
SSDEEP 12288:DY7NxlDWRoizlYBJdWB/SpOaQiuDcP3okpWlfdamn8jO3rxI0NetyWSz:ANxbUYTOasDcvokGn8A60NU
TLSH
T10B05010D6ABD42FBC452213C845146033AA0BC8543F8DFFB079B40673E769A94A7DEE9
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

62336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ashughieh.pdb

kernel32

GetSystemDefaultUILanguage GetUserDefaultUILanguage WaitForSingleObject GetUserDefaultLCID GetUserDefaultLangID GetLastError CloseHandle GetFileInformationByHandle GetFileInformationByHandleEx GetModuleHandleA GetProcAddress GetConsoleOutputCP GetNativeSystemInfo GetStdHandle GetVersion GetThreadLocale GetConsoleMode ReleaseSRWLockExclusive HeapReAlloc GetConsoleWindow WriteConsoleW LoadLibraryA SetLastError GetFileType GetFullPathNameW SetFileTime CreateFileW GetCurrentThread GetCurrentProcessId GetCPInfo IsDBCSLeadByte HeapFree GetSystemInfo GetLogicalDrives GetConsoleCP HeapAlloc SetFileInformationByHandle MultiByteToWideChar TryAcquireSRWLockExclusive GetProcessHeap SetFilePointerEx QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW HeapSize FlushFileBuffers WriteFile

ntdll

NtWriteFile RtlNtStatusToDosError NtReadFile

Name

.text

Size

114KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

648KB

Virtual Size

648KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

7KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-25_e0448e02d5bb22cd2d741a10f5fa5a32_akira_cobalt-strike_icedid_rusty-stealer

kernel32

ntdll

generic