2026-10-20_5f5ff7d30cd2ae677bbf14c68bcdb558_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-20_5f5ff7d30cd2ae677bbf14c68bcdb558_akira_rusty-stealer
Size 1.4MB
Sample261020-hkt2faes7x
SHA256 03045b23ac696222b7db17d60b87f96a47d06ab9be2d4ca074d5bb84e6b13344
MD5 5f5ff7d30cd2ae677bbf14c68bcdb558
SHA1 4e845af8d16ea19496e18e78f24d52d08ae7c39a
SHA512 311fc19ddd865c7d1b2d1f4471b9bdc1c1e83665f7588ba4bb8b39381447af89d6ad00347c307e58088314f40b0767ee74450a603c8ff5fc78b241466e241b08
SSDEEP 24576:a+h9RzgpVrpH7Jm2RqVjscjf1tvH0l7sI/WrrRXM:a+j5gpdpH7JBJcjffHUsF3R
TLSH
T19F65E716666864DDC1BBC0B8C2838F26B97270D90B396FF745D1827A2E25EF96D3C314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-20_5f5ff7d30cd2ae677bbf14c68bcdb558_akira_rusty-stealer

File Explorer

2026-10-20_5f5ff7d30cd2ae677bbf14c68bcdb558_akira_rusty-stealer

.exe 1.4MB

2026-10-20_5f5ff7d30cd2ae677bbf14c68bcdb558_akira_rusty-stealer

IMPHASH 20394aa189f0e42824d20d005fec39da
SHA256 03045b23ac696222b7db17d60b87f96a47d06ab9be2d4ca074d5bb84e6b13344
MD5 5f5ff7d30cd2ae677bbf14c68bcdb558
SHA1 4e845af8d16ea19496e18e78f24d52d08ae7c39a
SHA512 311fc19ddd865c7d1b2d1f4471b9bdc1c1e83665f7588ba4bb8b39381447af89d6ad00347c307e58088314f40b0767ee74450a603c8ff5fc78b241466e241b08
SSDEEP 24576:a+h9RzgpVrpH7Jm2RqVjscjf1tvH0l7sI/WrrRXM:a+j5gpdpH7JBJcjffHUsF3R
TLSH
T19F65E716666864DDC1BBC0B8C2838F26B97270D90B396FF745D1827A2E25EF96D3C314
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1086160

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-b2b487882d53b882.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

kernel32

InitializeSListHead PeekNamedPipe CloseHandle CreateEventA WaitForMultipleObjects WaitForSingleObject OpenSemaphoreA ReleaseSemaphore SetEvent GetProcAddress LoadLibraryA GetNativeSystemInfo GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess WideCharToMultiByte WaitForSingleObjectEx GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx GetLastError SetFileInformationByHandle FlushFileBuffers SetFileTime DuplicateHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW CopyFileExW CreateDirectoryW GetFileInformationByHandleEx SwitchToThread IsDebuggerPresent CreateEventW GetOverlappedResult GetFileInformationByHandle DeleteFileW FindFirstFileExW FindClose CreateHardLinkW GetConsoleMode GetModuleHandleW FormatMessageW GetFullPathNameW GetModuleHandleA GetTempPathW GetModuleFileNameW ExitProcess QueryPerformanceFrequency ReadFile CancelIo HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep CreateThread ReadFileEx SleepEx GetFileAttributesW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW WriteFileEx QueryPerformanceCounter GetCurrentThreadId GetSystemInfo GetExitCodeProcess IsProcessorFeaturePresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind FindNextFileW GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter CreateFileW TerminateProcess

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW RegEnumKeyExW

ole32

CoCreateInstance CoInitializeEx

oleaut32

SysStringLen SysFreeString

ntdll

NtWriteFile NtOpenFile NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError

vcruntime140

__current_exception_context __CxxFrameHandler3 __C_specific_handler memmove memcmp memset __current_exception _CxxThrowException memcpy

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _get_initial_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _initialize_narrow_environment _initialize_onexit_table _register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-20_5f5ff7d30cd2ae677bbf14c68bcdb558_akira_rusty-stealer

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic