2026-10-21_9cec045be6edf665d397142dc62d2235_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-21_9cec045be6edf665d397142dc62d2235_akira_cobalt-strike_rusty-stealer_satacom
Size 577KB
Sample261022-s6d78avy4k
SHA256 97b55d65f1c70aa582a29ace63360bb94ce688b6a076dd246bdc8f75d599daf7
MD5 9cec045be6edf665d397142dc62d2235
SHA1 b10b5d17e9bc7c42396c2c643b83a96e325dfce6
SHA512 6714707d0a065da2de7524f842c3dc115e6d8e7963a4878d8a797c3f221b79abc116154397db12b6ccde4ac2a480abe2477bfe62cd818a4180dc023b563622ce
SSDEEP 6144:5ByVrUqvhLSxGaGwTeaY4TL/4AVL/ItulrzLsQUPBL4SOcV+H4KMu:5VqJaGwTeaY4H4yMKE3PBLfBK
TLSH
T190C44B15BB5A49A8D156C034834A8A73AA3574CB0B32B9FF01C862793F79AF51F3C758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_9cec045be6edf665d397142dc62d2235_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-21_9cec045be6edf665d397142dc62d2235_akira_cobalt-strike_rusty-stealer_satacom

.exe 577KB

2026-10-21_9cec045be6edf665d397142dc62d2235_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH d5a6a53c878b6b112a59e748ce441d2d
SHA256 97b55d65f1c70aa582a29ace63360bb94ce688b6a076dd246bdc8f75d599daf7
MD5 9cec045be6edf665d397142dc62d2235
SHA1 b10b5d17e9bc7c42396c2c643b83a96e325dfce6
SHA512 6714707d0a065da2de7524f842c3dc115e6d8e7963a4878d8a797c3f221b79abc116154397db12b6ccde4ac2a480abe2477bfe62cd818a4180dc023b563622ce
SSDEEP 6144:5ByVrUqvhLSxGaGwTeaY4TL/4AVL/ItulrzLsQUPBL4SOcV+H4KMu:5VqJaGwTeaY4H4yMKE3PBLfBK
TLSH
T190C44B15BB5A49A8D156C034834A8A73AA3574CB0B32B9FF01C862793F79AF51F3C758
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

380624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

vst3_probe.pdb

kernel32

HeapAlloc HeapFree GetLastError QueryPerformanceCounter LoadLibraryExW SetThreadErrorMode FlsAlloc FreeLibrary GetModuleFileNameW GetProcessHeap CloseHandle GetProcAddress FormatMessageW EncodePointer FlsFree FlsSetValue FlsGetValue InitializeCriticalSectionEx RaiseException RtlPcToFileHeader RtlUnwindEx SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime FindNextFileW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId DeleteCriticalSection CreateThread GetConsoleOutputCP GetStdHandle WriteConsoleW MultiByteToWideChar GetModuleHandleA GetFullPathNameW GetConsoleMode FindClose FindFirstFileExW GetFileInformationByHandle GetModuleHandleW HeapReAlloc lstrlenW GetCurrentProcess WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex SetFileInformationByHandle WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW GetFileInformationByHandleEx SwitchToThread CreateFileW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-string-l1-1-0

strlen strcpy_s

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type _register_onexit_function _crt_atexit terminate _initialize_onexit_table abort _cexit __p___argv __p___argc _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _register_thread_local_exe_atexit_callback _initterm _initterm_e exit _c_exit _exit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

calloc malloc free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-21_9cec045be6edf665d397142dc62d2235_akira_cobalt-strike_rusty-stealer_satacom

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic