2026-10-21_7b3263007c6df0712421b7fd245a9adb_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-21_7b3263007c6df0712421b7fd245a9adb_akira_cobalt-strike_rusty-stealer_satacom
Size 1.7MB
Sample261022-y8ppmaft7s
SHA256 fc6f3faddfef1f018e07d1fdc129c3ab77125fb2f2454e86a9ae7f063b4128e2
MD5 7b3263007c6df0712421b7fd245a9adb
SHA1 ef8acf344574487e0270475df0b6646637448d24
SHA512 6911235af24002195c27b04f29b87c4186fc209b4d0e3df9072b356971134d2cd24f4027aa8a8bb7d5cd8b806b6385193d5df910d26b4c1160a35db7e9c4d4d5
SSDEEP 24576:lyXPrvcrzOZdQpeW7B5C+xSQiMCLP4mpOz1xejFbOJHGaidNG7/XfdMz0:AJWt5CLNbjFbOJHGa37
TLSH
T17F851B16FAA81CADD566C034D2576E661E36308A07297EF700AC462D2F11DF93E7F362
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_7b3263007c6df0712421b7fd245a9adb_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-21_7b3263007c6df0712421b7fd245a9adb_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.7MB

2026-10-21_7b3263007c6df0712421b7fd245a9adb_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH a72eef29a961b75f587597377b6d6412
SHA256 fc6f3faddfef1f018e07d1fdc129c3ab77125fb2f2454e86a9ae7f063b4128e2
MD5 7b3263007c6df0712421b7fd245a9adb
SHA1 ef8acf344574487e0270475df0b6646637448d24
SHA512 6911235af24002195c27b04f29b87c4186fc209b4d0e3df9072b356971134d2cd24f4027aa8a8bb7d5cd8b806b6385193d5df910d26b4c1160a35db7e9c4d4d5
SSDEEP 24576:lyXPrvcrzOZdQpeW7B5C+xSQiMCLP4mpOz1xejFbOJHGaidNG7/XfdMz0:AJWt5CLNbjFbOJHGa37
TLSH
T17F851B16FAA81CADD566C034D2576E661E36308A07297EF700AC462D2F11DF93E7F362
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1054112

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

pdf-7c4da794c58a486d.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

WaitForSingleObject GetProcessTimes CloseHandle GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo QueryInformationJobObject CreateJobObjectW CreateIoCompletionPort SetInformationJobObject AssignProcessToJobObject CreateToolhelp32Snapshot Thread32First Thread32Next OpenThread ResumeThread GetQueuedCompletionStatus OpenProcess GetSystemTimeAsFileTime GetOverlappedResult ReadFile GetCurrentDirectoryW InitializeSListHead FindNextFileW GetTempPathW GetModuleHandleA WaitForMultipleObjects FormatMessageW GetModuleHandleW GetFileType GetFileAttributesW Sleep SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP GetConsoleMode WriteConsoleW MultiByteToWideChar GetModuleFileNameW HeapAlloc ReleaseMutex CreateMutexA LoadLibraryA WaitForSingleObjectEx WideCharToMultiByte GetProcAddress SwitchToThread GetSystemInfo ExitProcess FindClose FindFirstFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW SetUnhandledExceptionFilter GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetEnvironmentStringsW TerminateProcess GetProcessId GetExitCodeProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle CancelIo GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess HeapFree HeapReAlloc CompareStringOrdinal GetLastError FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx

ntdll

NtOpenFile NtWriteFile NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception_context __current_exception __C_specific_handler _CxxThrowException memcmp memmove memcpy memset __CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

fmod floor __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe __p___argv _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm _initterm_e exit _initialize_onexit_table _register_onexit_function _crt_atexit terminate _exit __p___argc _set_app_type

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-21_7b3263007c6df0712421b7fd245a9adb_akira_cobalt-strike_rusty-stealer_satacom

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic