2026-10-21_8eac346c3bc8e5f055de3fd77bbabb57_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-21_8eac346c3bc8e5f055de3fd77bbabb57_akira_cobalt-strike_rusty-stealer_satacom
Size 814KB
Sample261022-whcw2ad191
SHA256 8672117dc5e72d92b4b13a453f0aa8feaca1ac7b80303e8d6870449c39958f0a
MD5 8eac346c3bc8e5f055de3fd77bbabb57
SHA1 788b8a04dee1ea36d853366cad78a3e5ab4f5d9c
SHA512 500c0434db50c7603e256edfb74694f2d5c58e01d5f124913f3dfe9729210eb4eb021ec52107027b3ee1f28b0e251324da976c26240222601a7382bba6a3a9a2
SSDEEP 12288:Hh1aog5Kk8cEEUUFNW6Gslsji8s0ASwq2safoyCbbR58HUKhuiZONKrFZ:3aogy6Gsq28s0AS+safoZoH2NN
TLSH
T132051926B668A0D9C17BC07983879F627D3230D90B356BF745D1827A2E29DF96E3C314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_8eac346c3bc8e5f055de3fd77bbabb57_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-21_8eac346c3bc8e5f055de3fd77bbabb57_akira_cobalt-strike_rusty-stealer_satacom

.exe 814KB

2026-10-21_8eac346c3bc8e5f055de3fd77bbabb57_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH dd763b7651eadd16ff87d4bef3794066
SHA256 8672117dc5e72d92b4b13a453f0aa8feaca1ac7b80303e8d6870449c39958f0a
MD5 8eac346c3bc8e5f055de3fd77bbabb57
SHA1 788b8a04dee1ea36d853366cad78a3e5ab4f5d9c
SHA512 500c0434db50c7603e256edfb74694f2d5c58e01d5f124913f3dfe9729210eb4eb021ec52107027b3ee1f28b0e251324da976c26240222601a7382bba6a3a9a2
SSDEEP 12288:Hh1aog5Kk8cEEUUFNW6Gslsji8s0ASwq2safoyCbbR58HUKhuiZONKrFZ:3aogy6Gsq28s0AS+safoZoH2NN
TLSH
T132051926B668A0D9C17BC07983879F627D3230D90B356BF745D1827A2E29DF96E3C314
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

584576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-35ef642cad717c46.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

GetFileAttributesW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId CreateMutexA CloseHandle FreeEnvironmentStringsW CompareStringOrdinal GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW SetFileInformationByHandle GetCurrentProcess DuplicateHandle SetFilePointerEx WaitForSingleObject GetStdHandle GetCurrentProcessId WriteFileEx SleepEx GetExitCodeProcess GetProcessHeap HeapFree FindFirstFileExW FindClose HeapReAlloc lstrlenW ReleaseMutex CreateEventW ReadFile GetOverlappedResult CancelIo GetModuleHandleW FormatMessageW GetModuleFileNameW ReadFileEx WaitForMultipleObjects CreateThread GetFullPathNameW GetModuleHandleA GetProcAddress HeapAlloc FindNextFileW CreateFileW GetFileInformationByHandle GetFileInformationByHandleEx GetConsoleMode GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetConsoleOutputCP MultiByteToWideChar WriteConsoleW WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA

ntdll

NtOpenFile RtlNtStatusToDosError NtCreateNamedPipeFile NtReadFile NtWriteFile

vcruntime140

_CxxThrowException __current_exception_context memset memmove memcmp __current_exception memcpy __CxxFrameHandler3 __C_specific_handler

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initialize_narrow_environment _set_app_type _initterm _initterm_e _seh_filter_exe _exit terminate __p___argc __p___argv _cexit _c_exit exit _get_initial_narrow_environment _crt_atexit _initialize_onexit_table _register_onexit_function _register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-21_8eac346c3bc8e5f055de3fd77bbabb57_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic