2026-10-20_07835e3ec3d5c7247447fc274941896e_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-20_07835e3ec3d5c7247447fc274941896e_akira_rusty-stealer
Size 1.4MB
Sample261020-lae2bax18m
SHA256 8eaaab3d49c5569d0b2e54e52ad7106053c4f050b9a758239c849a9ab56202f4
MD5 07835e3ec3d5c7247447fc274941896e
SHA1 130997f0fec48bb60c26c522b48cf3af35c3539b
SHA512 6c23fad24a450872333e4b0801e97a2314e383a253b3ac1406cc0e38ec6e9bc51cd4138638892eaa700fa0bb53fcbcfc08ffad93e78855f41a6b9284ea4bf78f
SSDEEP 24576:uP4XCYyf0gXOC7RTP52ygHGH4jAAuWO/2lAYJqx3qb0KAo3KSa:uMDdaRTPSGHJYoBlKAo4
TLSH
T14C65E7166668A5DDC1BBC078C2838F65792270D90B392FF745D1827A2E25EFD6E3C324
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-20_07835e3ec3d5c7247447fc274941896e_akira_rusty-stealer

File Explorer

2026-10-20_07835e3ec3d5c7247447fc274941896e_akira_rusty-stealer

.exe 1.4MB

2026-10-20_07835e3ec3d5c7247447fc274941896e_akira_rusty-stealer

IMPHASH 6e5686f5fd680921cff4d3696f17fb79
SHA256 8eaaab3d49c5569d0b2e54e52ad7106053c4f050b9a758239c849a9ab56202f4
MD5 07835e3ec3d5c7247447fc274941896e
SHA1 130997f0fec48bb60c26c522b48cf3af35c3539b
SHA512 6c23fad24a450872333e4b0801e97a2314e383a253b3ac1406cc0e38ec6e9bc51cd4138638892eaa700fa0bb53fcbcfc08ffad93e78855f41a6b9284ea4bf78f
SSDEEP 24576:uP4XCYyf0gXOC7RTP52ygHGH4jAAuWO/2lAYJqx3qb0KAo3KSa:uMDdaRTPSGHJYoBlKAo4
TLSH
T14C65E7166668A5DDC1BBC078C2838F65792270D90B392FF745D1827A2E25EFD6E3C324
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1070656

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-8a665e9626e0c9dc.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

kernel32

InitializeSListHead PeekNamedPipe CloseHandle CreateEventA WaitForMultipleObjects WaitForSingleObject OpenSemaphoreA ReleaseSemaphore SetEvent GetProcAddress LoadLibraryA GetNativeSystemInfo GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess WideCharToMultiByte WaitForSingleObjectEx GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx GetLastError SetFileInformationByHandle FlushFileBuffers SetFileTime DuplicateHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW CopyFileExW CreateDirectoryW GetFileInformationByHandleEx SwitchToThread IsDebuggerPresent CreateEventW GetOverlappedResult GetFileInformationByHandle DeleteFileW FindFirstFileExW FindClose CreateHardLinkW GetConsoleMode GetModuleHandleW FormatMessageW GetFullPathNameW GetModuleHandleA GetTempPathW GetModuleFileNameW ExitProcess QueryPerformanceFrequency ReadFile CancelIo HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep CreateThread ReadFileEx SleepEx GetFileAttributesW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW WriteFileEx QueryPerformanceCounter GetCurrentThreadId GetSystemInfo GetExitCodeProcess IsProcessorFeaturePresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind FindNextFileW GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter CreateFileW TerminateProcess

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW RegEnumKeyExW

ole32

CoCreateInstance CoInitializeEx

oleaut32

SysStringLen SysFreeString

ntdll

NtWriteFile NtOpenFile NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError

vcruntime140

__current_exception_context __CxxFrameHandler3 __C_specific_handler memcmp memset memmove __current_exception _CxxThrowException memcpy

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _get_initial_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _initialize_narrow_environment _initialize_onexit_table _register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-20_07835e3ec3d5c7247447fc274941896e_akira_rusty-stealer

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic