2026-10-12_b6ca1e24b940112347aadad9b5cfbf38_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-12_b6ca1e24b940112347aadad9b5cfbf38_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom
Size 5.4MB
Sample261013-2bdgwact21
SHA256 d5e8349c7ae0e5abf98c53758b236987bea0db5e97444cc2e345b53a72451b6b
MD5 b6ca1e24b940112347aadad9b5cfbf38
SHA1 975a09e8092f82aa5c1212576619a1c56e62f1e7
SHA512 ab0c0087e8353c8fdb2ef91b8818e539a117424ccc2b662f7187e9107dce055a9bf77a8b36521db75314b94d858b27be59acb117337977884ee02c99d1ec944d
SSDEEP 49152:p79Ph8KFSfyj4sjh2cEaZLJP7QwYBG2aDX6XUw1pUeV2e0vWWVfFTzwsj/7gNIU/:Td4szZUwAGoTYuot7g6+9GokE
TLSH
T112466CD6BB9564DFD2AAC03482564733A632B48B07219BEB4284C2753F26EF11F7D358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-12_b6ca1e24b940112347aadad9b5cfbf38_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

File Explorer

2026-10-12_b6ca1e24b940112347aadad9b5cfbf38_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

.exe 5.4MB

2026-10-12_b6ca1e24b940112347aadad9b5cfbf38_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

IMPHASH 578571cd7702d7e1ab987a4bd052ef11
SHA256 d5e8349c7ae0e5abf98c53758b236987bea0db5e97444cc2e345b53a72451b6b
MD5 b6ca1e24b940112347aadad9b5cfbf38
SHA1 975a09e8092f82aa5c1212576619a1c56e62f1e7
SHA512 ab0c0087e8353c8fdb2ef91b8818e539a117424ccc2b662f7187e9107dce055a9bf77a8b36521db75314b94d858b27be59acb117337977884ee02c99d1ec944d
SSDEEP 49152:p79Ph8KFSfyj4sjh2cEaZLJP7QwYBG2aDX6XUw1pUeV2e0vWWVfFTzwsj/7gNIU/:Td4szZUwAGoTYuot7g6+9GokE
TLSH
T112466CD6BB9564DFD2AAC03482564733A632B48B07219BEB4284C2753F26EF11F7D358
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3682976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kesfuzzunun-418654ca0fa2c628.pdb

kernel32

GetOverlappedResult WriteFile FlushFileBuffers GetTickCount MapViewOfFile CreateFileMappingW GetSystemTime GetSystemTimeAsFileTime FreeLibrary GetCurrentProcessId GetFileSize LockFileEx GetLastError HeapDestroy HeapCompact LoadLibraryW GetSystemInfo HeapReAlloc DeleteFileA WaitForSingleObjectEx LoadLibraryA CreateFileA FlushViewOfFile GetFileAttributesExW GetConsoleScreenBufferInfo GetDiskFreeSpaceA GetTempPathA Sleep HeapSize HeapValidate UnmapViewOfFile WaitForSingleObject CreateMutexW GetTempPathW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile GetDiskFreeSpaceW GetFullPathNameW HeapCreate AreFileApisANSI GetCurrentThreadId SetConsoleTextAttribute GetStdHandle ReadFile SystemTimeToFileTime QueryPerformanceCounter FormatMessageA WideCharToMultiByte OutputDebugStringW MultiByteToWideChar OutputDebugStringA RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection CompareStringOrdinal FormatMessageW FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError SetFileInformationByHandle SetFileTime QueryPerformanceFrequency CreateThread CreateEventW ReadFileEx GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry GetSystemTimePreciseAsFileTime LocalFree CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetEnvironmentStringsW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW CreateFileW lstrlenW FindFirstFileExW FindClose ExitProcess SwitchToThread CreateMutexA ReleaseMutex GetModuleHandleW GetModuleFileNameW WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileType HeapAlloc GetProcAddress WaitForMultipleObjects GetModuleHandleA InitializeSListHead HeapFree GetProcessHeap RtlVirtualUnwind GetFileAttributesW GetFileAttributesA DeleteFileW UnlockFile CloseHandle SetUnhandledExceptionFilter

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

ntdll

NtWriteFile RtlNtStatusToDosError NtReadFile NtCreateNamedPipeFile NtOpenFile

userenv

GetUserProfileDirectoryW

vcruntime140

__C_specific_handler strchr memcmp memmove memset memcpy __CxxFrameHandler3 memchr _CxxThrowException __current_exception __current_exception_context strrchr

api-ms-win-crt-string-l1-1-0

strcmp strlen strncmp strcspn strspn

api-ms-win-crt-math-l1-1-0

__setusermatherr floor fmod log

api-ms-win-crt-heap-l1-1-0

malloc free _set_new_mode _msize realloc calloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback exit _initterm_e _initterm _c_exit _get_initial_narrow_environment _initialize_onexit_table _register_onexit_function __p___argc _cexit _initialize_narrow_environment _configure_narrow_argv _set_app_type __p___argv _seh_filter_exe _beginthreadex _endthreadex _exit terminate _crt_atexit _wassert

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-12_b6ca1e24b940112347aadad9b5cfbf38_akira_cobalt-strike_quasar-rat_rusty-stealer_satacom

kernel32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

ntdll

userenv

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic