2026-10-21_6a6dc4fc604cb2ee1349c524ae88950b_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-21_6a6dc4fc604cb2ee1349c524ae88950b_akira_rusty-stealer
Size 2.4MB
Sample261022-2tpb4aaw3k
SHA256 c40b041e561c9d9e58e7ab97d0c433a1a00c2f032ae8be24de2c37851888b2e1
MD5 6a6dc4fc604cb2ee1349c524ae88950b
SHA1 cd4b896291ca66141f97341ece4eac3de42b45be
SHA512 4c1fb58d7b8d77c78e342ea1836355028c87fc5c075c8db39c9b09a70140d10adadefa882f24bf96e4a1c82854b95eb50306280c572f5cf3b9d100f6456ec614
SSDEEP 49152:kIuTEqOqP5TqlBlMBoRn98on5mrqdvbVj0GWLpim/6:GsCCIMvbVIGga
TLSH
T102C52815BA5AA8ACD05AC4B0834689735A3030CB1B35B9FF00D492793FB9BF55B3C769
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_6a6dc4fc604cb2ee1349c524ae88950b_akira_rusty-stealer

File Explorer

2026-10-21_6a6dc4fc604cb2ee1349c524ae88950b_akira_rusty-stealer

.exe 2.4MB

2026-10-21_6a6dc4fc604cb2ee1349c524ae88950b_akira_rusty-stealer

IMPHASH e9278212927fcd16d6495ef71e8a28e9
SHA256 c40b041e561c9d9e58e7ab97d0c433a1a00c2f032ae8be24de2c37851888b2e1
MD5 6a6dc4fc604cb2ee1349c524ae88950b
SHA1 cd4b896291ca66141f97341ece4eac3de42b45be
SHA512 4c1fb58d7b8d77c78e342ea1836355028c87fc5c075c8db39c9b09a70140d10adadefa882f24bf96e4a1c82854b95eb50306280c572f5cf3b9d100f6456ec614
SSDEEP 49152:kIuTEqOqP5TqlBlMBoRn98on5mrqdvbVj0GWLpim/6:GsCCIMvbVIGga
TLSH
T102C52815BA5AA8ACD05AC4B0834689735A3030CB1B35B9FF00D492793FB9BF55B3C769
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1842684

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

cs2css.pdb

bcryptprimitives

ProcessPrng

kernel32

CloseHandle GetStdHandle GetConsoleScreenBufferInfo FillConsoleOutputCharacterA FillConsoleOutputAttribute SetConsoleCursorPosition SetConsoleTextAttribute SetConsoleMode GetFileInformationByHandleEx GetConsoleMode IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime FindNextFileW GetModuleHandleA WaitForMultipleObjects FormatMessageW GetModuleHandleW GetFileType GetFileAttributesW Sleep SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP GetSystemInfo CompareStringOrdinal GetLastError WaitForSingleObject FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId MoveFileExW SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo GetFileInformationByHandle GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess TerminateProcess GetEnvironmentStringsW CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW RemoveDirectoryW CopyFileExW FindFirstFileExW FindClose ExitProcess SwitchToThread GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex GetFinalPathNameByHandleW DeleteFileW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ntdll

NtWriteFile NtOpenFile NtCreateNamedPipeFile RtlNtStatusToDosError NtReadFile

vcruntime140

memmove __current_exception_context __CxxFrameHandler3 __C_specific_handler memcmp _CxxThrowException __std_exception_destroy __std_exception_copy __current_exception memset memcpy

api-ms-win-crt-math-l1-1-0

__setusermatherr acosf roundf cosf sinf floorf ceilf floor ceil round expf exp2 truncf pow trunc sqrtf

api-ms-win-crt-runtime-l1-1-0

terminate _crt_atexit _initialize_onexit_table _register_thread_local_exe_atexit_callback _register_onexit_function _c_exit _seh_filter_exe _set_app_type _cexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argv __p___argc

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc free _set_new_mode _callnewh

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-21_6a6dc4fc604cb2ee1349c524ae88950b_akira_rusty-stealer

bcryptprimitives

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic