2026-10-06_60f8dd6e237c5051cff5202774c774fa_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-06_60f8dd6e237c5051cff5202774c774fa_akira_cobalt-strike_rusty-stealer_satacom
Size 1.3MB
Sample261006-p96vvszvbz
SHA256 0c321c251e2f612b51556f86488badfebc88ec74680226c6afbd0bcafe2e9ea2
MD5 60f8dd6e237c5051cff5202774c774fa
SHA1 1d480b8a45512756f3ffdec3430f03a902bdd5bb
SHA512 fd94e0b3030e85ad1da6b4a899ecca5d789053955a9d0357d77d932ed9ea6a7ced8dd324c062f461bdc480233806dd2aad21eddc37d31a30f0409982cb1da8c5
SSDEEP 12288:bptak8SfSbmZy8C5KUutUzF8L37rGODQBkc/FAu:PahjmC8UuQ8T7rlDQZFA
TLSH
T1DC55E72CFE866AEEC829C03487B75A7226B17C9A272356FB0184453E3E5B7E51F341D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-06_60f8dd6e237c5051cff5202774c774fa_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-06_60f8dd6e237c5051cff5202774c774fa_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.3MB

2026-10-06_60f8dd6e237c5051cff5202774c774fa_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 14800488de24739219fa0847ee965b14
SHA256 0c321c251e2f612b51556f86488badfebc88ec74680226c6afbd0bcafe2e9ea2
MD5 60f8dd6e237c5051cff5202774c774fa
SHA1 1d480b8a45512756f3ffdec3430f03a902bdd5bb
SHA512 fd94e0b3030e85ad1da6b4a899ecca5d789053955a9d0357d77d932ed9ea6a7ced8dd324c062f461bdc480233806dd2aad21eddc37d31a30f0409982cb1da8c5
SSDEEP 12288:bptak8SfSbmZy8C5KUutUzF8L37rGODQBkc/FAu:PahjmC8UuQ8T7rlDQZFA
TLSH
T1DC55E72CFE866AEEC829C03487B75A7226B17C9A272356FB0184453E3E5B7E51F341D4
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

582880

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

sv_2022-1ffbbb0eaa998cee.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId CreateMutexA CloseHandle GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo FreeEnvironmentStringsW CompareStringOrdinal GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SwitchToThread WaitForSingleObject QueryPerformanceCounter GetSystemInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetCommandLineW SetFileInformationByHandle GetCurrentProcess DuplicateHandle SetFilePointerEx GetCurrentProcessId WriteFileEx SleepEx GetExitCodeProcess QueryPerformanceFrequency GetSystemTimePreciseAsFileTime GetProcessHeap HeapFree HeapReAlloc lstrlenW ReleaseMutex FindClose CreateFileW CreateEventW GetOverlappedResult GetFileInformationByHandle GetFileInformationByHandleEx FindFirstFileExW ReadFile CancelIo GetConsoleMode GetFileType GetModuleHandleW FormatMessageW GetModuleFileNameW ExitProcess CreateNamedPipeW ReadFileEx WaitForMultipleObjects GetFullPathNameW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetConsoleOutputCP MultiByteToWideChar WriteConsoleW WideCharToMultiByte CreateThread GetModuleHandleA GetProcAddress HeapAlloc WaitForSingleObjectEx LoadLibraryA

ntdll

RtlNtStatusToDosError NtWriteFile NtReadFile

userenv

GetUserProfileDirectoryW

vcruntime140

memset __current_exception_context memmove _CxxThrowException __C_specific_handler __current_exception memcmp __CxxFrameHandler3 memcpy

api-ms-win-crt-math-l1-1-0

floor fmod __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e _set_app_type _exit _configure_narrow_argv __p___argc __p___argv _seh_filter_exe _c_exit _register_thread_local_exe_atexit_callback exit _cexit terminate _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-06_60f8dd6e237c5051cff5202774c774fa_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic