2026-09-26_4c4231daf52139fb72dd124ce10795c0_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-26_4c4231daf52139fb72dd124ce10795c0_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom
Size 6.7MB
Sample260926-28nn4stdkb
SHA256 1c80093399cb88b140b245309691d59b557736b5078405286977030d947ca991
MD5 4c4231daf52139fb72dd124ce10795c0
SHA1 a010153f809ff3f4f1123a857966d1c0df6a4490
SHA512 e5686dc6efdd02398e2ca3e8e0e22cbfb566b676b7c57634f36f3f715701667673a8aeddf2cfc6d4c449dfc5caafdf138032e6cb66df7b6d7d29d33bb505b61f
SSDEEP 49152:Pi7iGMGp1sCiqZ5WsU9eCT67FAdIBGqcFa9FtT0oLMgH8ZFvpHWLiYJquHogdWTG:rSRTxx7Gy87kBFKML+1c
TLSH
T1AC66B616667890D9D1BFC078D2839F22BD60389D47397BF748C1866A2F24EF8A93D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-26_4c4231daf52139fb72dd124ce10795c0_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

File Explorer

2026-09-26_4c4231daf52139fb72dd124ce10795c0_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

.exe 6.7MB

2026-09-26_4c4231daf52139fb72dd124ce10795c0_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

IMPHASH 4b001b40f115de67cf0b440a8f0ecd47
SHA256 1c80093399cb88b140b245309691d59b557736b5078405286977030d947ca991
MD5 4c4231daf52139fb72dd124ce10795c0
SHA1 a010153f809ff3f4f1123a857966d1c0df6a4490
SHA512 e5686dc6efdd02398e2ca3e8e0e22cbfb566b676b7c57634f36f3f715701667673a8aeddf2cfc6d4c449dfc5caafdf138032e6cb66df7b6d7d29d33bb505b61f
SSDEEP 49152:Pi7iGMGp1sCiqZ5WsU9eCT67FAdIBGqcFa9FtT0oLMgH8ZFvpHWLiYJquHogdWTG:rSRTxx7Gy87kBFKML+1c
TLSH
T1AC66B616667890D9D1BFC078D2839F22BD60389D47397BF748C1866A2F24EF8A93D354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5530848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shared_il_operation_verification-53446b96f17d15a6.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime CloseHandle GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult FlushFileBuffers GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetEnvironmentStringsW CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW RemoveDirectoryW FindFirstFileExW FindClose ExitProcess GetSystemInfo SwitchToThread GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex DeleteFileW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetFileType GetModuleHandleW FormatMessageW WaitForMultipleObjects GetModuleHandleA GetTempPathW

bcrypt

BCryptFinishHash BCryptCreateHash BCryptSetProperty BCryptDestroyHash BCryptGetProperty BCryptHashData BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider

ntdll

NtReadFile NtOpenFile NtCreateNamedPipeFile NtWriteFile RtlNtStatusToDosError

userenv

GetUserProfileDirectoryW

vcruntime140

_CxxThrowException __CxxFrameHandler3 __current_exception_context __current_exception __C_specific_handler memcpy memset memmove memcmp

api-ms-win-crt-math-l1-1-0

floor fmod __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit _cexit terminate __p___argc _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _set_app_type __p___argv _seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-26_4c4231daf52139fb72dd124ce10795c0_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

bcrypt

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic