General
- Target 2026-10-21_9207be7b0f36a11fcc9a2f9158cd4cf2_akira_rusty-stealer
- Size 100.0MB
- Sample261022-vrz79aag99
- SHA256 a0d717b66f0e6e36ce2544586785e490e2573f03ebffe14befeb616a652ad398
- MD5 9207be7b0f36a11fcc9a2f9158cd4cf2
- SHA1 01f36ad5305a42d2d9460093bb3ec0020d547312
- SHA512 411274f6d56f6a5205c694e82f43bd17c671d9d2164b0cbd28cdecb387d937fed0f6fcd6f5644ebe41de243756e91947598b048f773edccab9d67cf9350c46d6
- SSDEEP 3145728:mrwvhbxdz1k/UwMhzU3AIaC42Yyonvm/f:4wvhbxi1IUw126e/f
- TLSH T195383342CA67CDE4F125D53987BB226358B438D80338FAFB6F7C86073398E55957848A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_9207be7b0f36a11fcc9a2f9158cd4cf2_akira_rusty-stealer.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_9207be7b0f36a11fcc9a2f9158cd4cf2_akira_rusty-stealer.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_9207be7b0f36a11fcc9a2f9158cd4cf2_akira_rusty-stealer
- Size 100.0MB
- SHA256 a0d717b66f0e6e36ce2544586785e490e2573f03ebffe14befeb616a652ad398
- MD5 9207be7b0f36a11fcc9a2f9158cd4cf2
- SHA1 01f36ad5305a42d2d9460093bb3ec0020d547312
- SHA512 411274f6d56f6a5205c694e82f43bd17c671d9d2164b0cbd28cdecb387d937fed0f6fcd6f5644ebe41de243756e91947598b048f773edccab9d67cf9350c46d6
- SSDEEP 3145728:mrwvhbxdz1k/UwMhzU3AIaC42Yyonvm/f:4wvhbxi1IUw126e/f
- TLSH T195383342CA67CDE4F125D53987BB226358B438D80338FAFB6F7C86073398E55957848A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
Downloads MZ/PE file
Modifies RDP port number used by Windows
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Checks whether UAC is enabled