General

  • Target
    2026-10-21_9207be7b0f36a11fcc9a2f9158cd4cf2_akira_rusty-stealer
  • Size 100.0MB
  • Sample261022-vrz79aag99
  • SHA256 a0d717b66f0e6e36ce2544586785e490e2573f03ebffe14befeb616a652ad398
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-21_9207be7b0f36a11fcc9a2f9158cd4cf2_akira_rusty-stealer
    • Size 100.0MB
    • SHA256 a0d717b66f0e6e36ce2544586785e490e2573f03ebffe14befeb616a652ad398
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Custom signature

      Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers

    • Downloads MZ/PE file

    • Modifies RDP port number used by Windows

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v16

Tasks