2026-10-12_b3cc116c4226c5e054098093a2e2138c_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-12_b3cc116c4226c5e054098093a2e2138c_akira_rusty-stealer
Size 10.1MB
Sample261013-2htsfacv3x
SHA256 9b1f2cf191315d37e855fb20f5f21c1ec7008a1930a422a25abd19ca121f5027
MD5 b3cc116c4226c5e054098093a2e2138c
SHA1 0a078178eb721ea92c4e9b86260c838f957970b3
SHA512 d7a363a39a364f96fef09028c90370f38a38ab114752383c88c241283a47ed85d25682b2688a6d97348eb748d32e91096491f2c31d035b900d7f1397219718c3
SSDEEP 98304:pS4Tfj7JFsuGJiG+0YPUxcYOmu1xe+wfbt:pS8Fs6GF
TLSH
T121B6A426667990E9D57BC0B8C2839F21792270DA0B392FF344D1827A2F25EF96D3D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-12_b3cc116c4226c5e054098093a2e2138c_akira_rusty-stealer

File Explorer

2026-10-12_b3cc116c4226c5e054098093a2e2138c_akira_rusty-stealer

.exe 10.1MB

2026-10-12_b3cc116c4226c5e054098093a2e2138c_akira_rusty-stealer

IMPHASH 3aa19f6f688777b0c2e619dd7fd6a1c7
SHA256 9b1f2cf191315d37e855fb20f5f21c1ec7008a1930a422a25abd19ca121f5027
MD5 b3cc116c4226c5e054098093a2e2138c
SHA1 0a078178eb721ea92c4e9b86260c838f957970b3
SHA512 d7a363a39a364f96fef09028c90370f38a38ab114752383c88c241283a47ed85d25682b2688a6d97348eb748d32e91096491f2c31d035b900d7f1397219718c3
SSDEEP 98304:pS4Tfj7JFsuGJiG+0YPUxcYOmu1xe+wfbt:pS8Fs6GF
TLSH
T121B6A426667990E9D57BC0B8C2839F21792270DA0B392FF344D1827A2F25EF96D3D354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7895288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-ac0d7953a0d49aa6.pdb

shell32

SHGetKnownFolderPath

combase

CoTaskMemFree

kernel32

GetCurrentThreadId GetFullPathNameW SetLastError SleepEx CreateThread WriteFileEx CreateEventW SetFileInformationByHandle FreeEnvironmentStringsW CreateFileW CompareStringOrdinal LoadLibraryA GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind WaitForSingleObject WaitForMultipleObjects CancelIo GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess TerminateProcess GetStdHandle IsProcessorFeaturePresent CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW QueryPerformanceCounter GetModuleHandleA CopyFileExW FindFirstFileExW ExitProcess SwitchToThread WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex GetFinalPathNameByHandleW CreateSymbolicLinkW DeviceIoControl HeapReAlloc DeleteFileW SetEnvironmentVariableW HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleOutputCP GetModuleHandleW FormatMessageW GetModuleFileNameW SetCurrentDirectoryW GetLastError GetProcAddress GetSystemTimeAsFileTime GetConsoleMode GetFileInformationByHandle GetNativeSystemInfo InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetFileSizeEx GetFileAttributesW HeapFree GetProcessHeap FindNextFileW FindFirstFileW FindClose CloseHandle lstrlenW SetFileTime

ole32

CoInitializeEx CoCreateInstance CoInitialize

oleaut32

SysStringLen SysFreeString

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

advapi32

RegOpenKeyExW RegQueryValueExW RegEnumKeyExW RegOpenKeyExA RegCloseKey

ntdll

NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError NtWriteFile NtOpenFile

vcruntime140

memmove __CxxFrameHandler3 memcpy memcmp memset wcschr _CxxThrowException __C_specific_handler __current_exception_context __current_exception

api-ms-win-crt-string-l1-1-0

wcslen _wcsdup

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free

api-ms-win-crt-stdio-l1-1-0

_fileno __p__commode _set_fmode fgetws _wfopen_s __stdio_common_vswscanf fclose _get_osfhandle

api-ms-win-crt-math-l1-1-0

__setusermatherr fmod

api-ms-win-crt-runtime-l1-1-0

_set_app_type terminate _crt_atexit _configure_narrow_argv _initialize_onexit_table _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _register_onexit_function __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-12_b3cc116c4226c5e054098093a2e2138c_akira_rusty-stealer

shell32

combase

kernel32

ole32

oleaut32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

advapi32

ntdll

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic