2026-09-30_259018f6c3a2e5e7948a37e560b5614d_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-30_259018f6c3a2e5e7948a37e560b5614d_akira_cobalt-strike_rusty-stealer_satacom
Size 104KB
Sample261001-vv9absha63
SHA256 4516cd85e4b6c46de9a64642f6b3027a62a6bce98d20ee0ec153033f65c81e30
MD5 259018f6c3a2e5e7948a37e560b5614d
SHA1 10489d74f5939bf93c25adbf971cfa0b8dd3431b
SHA512 de895d3bc4dc0e6b31d51ea6cc71d14db922aa39d4d41d0c607afaa1217c6ff81f199ab76d8cf241d5bf4a4fc9d576be83bbf8f77302615d8b718a3debb2e6a1
SSDEEP 1536:Ri49rjjECqOu6OT7R0UXxBqsML4re+RAi69heQJh8ZZCq4Di9FvZX8FJC:RiOYS0T7RtPqzQjRmhXaZZe29f8rC
TLSH
T10FA35D17B64195FCF019C07CC3158673A776B0E50B22ABFF12B851382F69AE62F39A15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_259018f6c3a2e5e7948a37e560b5614d_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-09-30_259018f6c3a2e5e7948a37e560b5614d_akira_cobalt-strike_rusty-stealer_satacom

.exe 104KB

2026-09-30_259018f6c3a2e5e7948a37e560b5614d_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH aeda8e03da3b89af41d5b62cb4353c76
SHA256 4516cd85e4b6c46de9a64642f6b3027a62a6bce98d20ee0ec153033f65c81e30
MD5 259018f6c3a2e5e7948a37e560b5614d
SHA1 10489d74f5939bf93c25adbf971cfa0b8dd3431b
SHA512 de895d3bc4dc0e6b31d51ea6cc71d14db922aa39d4d41d0c607afaa1217c6ff81f199ab76d8cf241d5bf4a4fc9d576be83bbf8f77302615d8b718a3debb2e6a1
SSDEEP 1536:Ri49rjjECqOu6OT7R0UXxBqsML4re+RAi69heQJh8ZZCq4Di9FvZX8FJC:RiOYS0T7RtPqzQjRmhXaZZe29f8rC
TLSH
T10FA35D17B64195FCF019C07CC3158673A776B0E50B22ABFF12B851382F69AE62F39A15
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

75376

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

process_hollowing.pdb

ntdll

RtlCaptureContext RtlNtStatusToDosError NtWriteFile RtlVirtualUnwind RtlLookupFunctionEntry ZwQueryInformationProcess

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

kernel32

GetModuleHandleW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetModuleHandleA HeapAlloc WriteConsoleW MultiByteToWideChar WaitForSingleObject CreateProcessA ReadProcessMemory WriteProcessMemory ResumeThread AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetCurrentThreadId GetLastError SetLastError GetEnvironmentVariableW GetCurrentDirectoryW WaitForSingleObjectEx LoadLibraryA GetProcAddress GetCurrentProcess lstrlenW GetCurrentProcessId CreateMutexA CloseHandle ReleaseMutex WideCharToMultiByte GetStdHandle GetConsoleMode GetConsoleOutputCP

vcruntime140

__current_exception __current_exception_context __C_specific_handler memmove memset __CxxFrameHandler3 memcpy memcmp

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e exit _exit _initialize_narrow_environment __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _get_initial_narrow_environment _set_app_type _configure_narrow_argv _initialize_onexit_table _register_onexit_function _crt_atexit terminate _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_259018f6c3a2e5e7948a37e560b5614d_akira_cobalt-strike_rusty-stealer_satacom

ntdll

api-ms-win-core-synch-l1-2-0

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic