2026-10-20_7b22a3395e0a0a3de52247b25ad8c57b_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-20_7b22a3395e0a0a3de52247b25ad8c57b_akira_rusty-stealer
Size 5.7MB
Sample261020-gylrjsae65
SHA256 3c1e480f289af82a5815e53bc97cb2068a5d606280a00b13f87f6b2d45930e72
MD5 7b22a3395e0a0a3de52247b25ad8c57b
SHA1 069f7c794274360ac3e761499312f7845d09d949
SHA512 a52ae30037ca70252d2d81d28a8526896409137809e473258e999489cf94ab87d6c8a068262ba5d7b5f144a938fce416581098873fbf5c6e9241566a5b68e77d
SSDEEP 98304:iJWmabu65NpYpRyZDxNx6gTXHp5AgNv24VYzlEPLNOE:HdvTv6CNOE
TLSH
T1F6565A03F66281FCC16AC035835A6232FA32BC4947357AEB5BE44B213E55FA06B7DB54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-20_7b22a3395e0a0a3de52247b25ad8c57b_akira_rusty-stealer

File Explorer

2026-10-20_7b22a3395e0a0a3de52247b25ad8c57b_akira_rusty-stealer

.exe 5.7MB

2026-10-20_7b22a3395e0a0a3de52247b25ad8c57b_akira_rusty-stealer

IMPHASH 1a99bc08519ba952e057ee029f7f6a84
SHA256 3c1e480f289af82a5815e53bc97cb2068a5d606280a00b13f87f6b2d45930e72
MD5 7b22a3395e0a0a3de52247b25ad8c57b
SHA1 069f7c794274360ac3e761499312f7845d09d949
SHA512 a52ae30037ca70252d2d81d28a8526896409137809e473258e999489cf94ab87d6c8a068262ba5d7b5f144a938fce416581098873fbf5c6e9241566a5b68e77d
SSDEEP 98304:iJWmabu65NpYpRyZDxNx6gTXHp5AgNv24VYzlEPLNOE:HdvTv6CNOE
TLSH
T1F6565A03F66281FCC16AC035835A6232FA32BC4947357AEB5BE44B213E55FA06B7DB54
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4424960

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

corelift.pdb

bcryptprimitives

ProcessPrng

ntdll

NtReadFile RtlNtStatusToDosError NtQuerySystemInformation NtQueryInformationProcess NtCreateNamedPipeFile NtOpenFile NtWriteFile RtlGetVersion

kernel32

UnhandledExceptionFilter InitializeSListHead TlsFree SetUnhandledExceptionFilter GetUserDefaultUILanguage LCIDToLocaleName RtlUnwindEx FindClose lstrlenW SetLastError TlsSetValue GetModuleHandleW GetCurrentThreadId GetSystemTimePreciseAsFileTime HeapReAlloc GetCurrentThread FindFirstVolumeW FindNextVolumeW FindVolumeClose GetVolumePathNamesForVolumeNameW GetDriveTypeW GetVolumeInformationW GlobalMemoryStatusEx OpenProcess SetPriorityClass GetCurrentProcess GetFullPathNameW SetThreadStackGuarantee WaitForSingleObject GetCommandLineW HeapFree TlsGetValue GetProcessId CompareStringOrdinal SetWaitableTimer FreeEnvironmentStringsW GetEnvironmentStringsW ReadFile GetOverlappedResult CancelIo CreateEventW WriteFileEx ReadFileEx GetEnvironmentVariableW CreateMutexA TlsAlloc GetCurrentDirectoryW EncodePointer RtlVirtualUnwind RaiseException RtlCaptureContext SwitchToThread QueryPerformanceFrequency CreateWaitableTimerExW QueryPerformanceCounter DeviceIoControl K32GetPerformanceInfo SetEnvironmentVariableW AddVectoredExceptionHandler CreateThread RtlPcToFileHeader IsProcessorFeaturePresent GetProcessHeap GetModuleHandleA Sleep CreateDirectoryW CreateFileW LoadLibraryW GetSystemInfo GetProcAddress RtlLookupFunctionEntry WaitForSingleObjectEx GetCurrentProcessId WideCharToMultiByte ReleaseMutex WriteConsoleW MultiByteToWideChar HeapAlloc SleepEx FormatMessageW SetFileTime SetFileInformationByHandle FindFirstFileExW GetFileInformationByHandle GetFileInformationByHandleEx ExitProcess GetSystemDirectoryW GetWindowsDirectoryW GetFileAttributesW GetModuleFileNameW DuplicateHandle WaitForMultipleObjects GetExitCodeProcess GetTempPathW DeleteFileW GetFinalPathNameByHandleW FindNextFileW ReadProcessMemory GetProcessTimes GetSystemTimes GetProcessIoCounters VirtualQueryEx GetConsoleOutputCP LocalFree GetDiskFreeSpaceExW GetLastError CloseHandle GetConsoleMode GetStdHandle CreatePipe DeleteCriticalSection ReleaseSRWLockExclusive LoadLibraryA AcquireSRWLockExclusive WakeAllConditionVariable FreeLibrary LoadLibraryExW OutputDebugStringW OutputDebugStringA LoadLibraryExA SleepConditionVariableSRW GetSystemTimeAsFileTime CreateProcessW TerminateProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

user32

SystemParametersInfoA RemoveMenu DrawIconEx ReleaseDC GetDC AppendMenuW MapVirtualKeyExW InsertMenuW CreateIcon SetMenuItemInfoW SetParent CreatePopupMenu CreateMenu CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon GetMenuBarInfo ShowWindow SetFocus OffsetRect GetWindowDC DrawTextW GetWindow CheckMenuItem ToUnicodeEx VkKeyScanW EnableMenuItem TrackPopupMenu IsProcessDPIAware GetKeyState RegisterWindowMessageA GetMenu SetWindowLongW PostQuitMessage TranslateAcceleratorW MsgWaitForMultipleObjectsEx MapWindowPoints SetWindowRgn GetSystemMenu ShowCursor GetWindowTextLengthW GetUpdateRect ValidateRect GetRawInputData DrawMenuBar SetMenu GetMenuItemInfoW GetKeyboardLayout EnumChildWindows DispatchMessageA GetMessageA GetParent AdjustWindowRect FindWindowExW GetClipCursor PostThreadMessageW SetCursor LoadCursorW DestroyMenu CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SetCapture SystemParametersInfoW ReleaseCapture FillRect MonitorFromRect GetWindowLongW ScreenToClient GetWindowTextW DefWindowProcW GetWindowPlacement SetWindowPlacement PeekMessageW GetMonitorInfoW ChangeDisplaySettingsExW UpdateWindow InvalidateRect SetWindowTextW SetCursorPos GetForegroundWindow InvalidateRgn SetWindowPos GetWindowRect FlashWindowEx PostMessageW GetActiveWindow ClientToScreen SetPropW GetAsyncKeyState SetWindowDisplayAffinity SendInput MapVirtualKeyW SetForegroundWindow RegisterTouchWindow GetSystemMetrics IsWindow AdjustWindowRectEx RegisterClassExW IsWindowEnabled EnableWindow MonitorFromPoint GetWindowLongPtrW EnumDisplayMonitors MonitorFromWindow IsIconic IsWindowVisible GetCursorPos SendMessageW GetClientRect RedrawWindow DispatchMessageW TranslateMessage DestroyWindow ClipCursor GetMessageW SetWindowLongPtrW CreateWindowExW RegisterRawInputDevices GetKeyboardState

comctl32

SetWindowSubclass TaskDialogIndirect RemoveWindowSubclass DefSubclassProc

oleaut32

GetErrorInfo SetErrorInfo SysFreeString SysStringLen

gdi32

SelectObject SetTextColor GetDeviceCaps DeleteDC SetBkMode DeleteObject CreateSolidBrush CreateDIBSection CreateCompatibleDC CombineRgn BitBlt CreateRectRgn

dwmapi

DwmGetWindowAttribute DwmSetWindowAttribute DwmEnableBlurBehindWindow

ole32

OleInitialize CoInitialize CoCreateFreeThreadedMarshaler CoUninitialize RegisterDragDrop CoInitializeEx CoTaskMemFree RevokeDragDrop CoCreateInstance CoTaskMemAlloc

shell32

DragFinish ILCreateFromPathW ILFree ShellExecuteW DragQueryFileW CommandLineToArgvW SHGetKnownFolderPath ShellExecuteExW SHAppBarMessage SHOpenFolderAndSelectItems

shlwapi

SHCreateMemStream

advapi32

RegGetValueW EventUnregister EventWriteTransfer RegCloseKey RegQueryValueExW RegOpenKeyExW EventSetInformation IsValidSid GetLengthSid CopySid GetTokenInformation OpenProcessToken EventRegister

psapi

GetModuleFileNameExW EmptyWorkingSet

winmm

timeBeginPeriod

pdh

PdhRemoveCounter PdhEnumObjectsA PdhCloseQuery PdhGetFormattedCounterValue PdhOpenQueryA PdhCollectQueryData PdhAddEnglishCounterW

powrprof

CallNtPowerInformation

api-ms-win-crt-math-l1-1-0

roundf trunc round pow floor __setusermatherr

api-ms-win-crt-string-l1-1-0

strcmp wcscmp wcslen strlen _wcsicmp wcsncmp strcpy_s

api-ms-win-crt-convert-l1-1-0

_ultow_s _wtoi wcstol

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit abort _exit _register_thread_local_exe_atexit_callback __p___argc _initialize_onexit_table _register_onexit_function __p___argv terminate _crt_atexit _cexit _c_exit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh _set_new_mode calloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-20_7b22a3395e0a0a3de52247b25ad8c57b_akira_rusty-stealer

bcryptprimitives

ntdll

kernel32

api-ms-win-core-synch-l1-2-0

user32

comctl32

oleaut32

gdi32

dwmapi

ole32

shell32

shlwapi

advapi32

psapi

winmm

pdh

powrprof

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic