2026-10-22_e91a5fc5bcc8f7883549e059160f97d5_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_e91a5fc5bcc8f7883549e059160f97d5_akira_cobalt-strike_rusty-stealer_satacom
Size 1.2MB
Sample261023-e5ekpsby8l
SHA256 65c9a007782f250f65c79b57bcf6a918e84cdda769dc69afba2030c2403b3b61
MD5 e91a5fc5bcc8f7883549e059160f97d5
SHA1 14004a1ef56c53dcb7580c6cdec892574cecef51
SHA512 242eeb4c27072684fe304392d4755131e3748ad27a89d06a54b945d2bf70e050ef8312238ba2937263307ad31cbf225b8519b787454c20981413a87bbc739913
SSDEEP 24576:JncmI7wPYVwMJ+no+epio2SXI121PSdAl7/YzsJtO0:iLao+epio2SXI121Ke7gOt
TLSH
T15D55F9267664A5E9C1BBC0B8C2838F21792170C90B356FF745D5927A2F26EF86D3D324
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_e91a5fc5bcc8f7883549e059160f97d5_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-22_e91a5fc5bcc8f7883549e059160f97d5_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.2MB

2026-10-22_e91a5fc5bcc8f7883549e059160f97d5_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 260c2d1735a44b3e7fba41c2c1b5b41f
SHA256 65c9a007782f250f65c79b57bcf6a918e84cdda769dc69afba2030c2403b3b61
MD5 e91a5fc5bcc8f7883549e059160f97d5
SHA1 14004a1ef56c53dcb7580c6cdec892574cecef51
SHA512 242eeb4c27072684fe304392d4755131e3748ad27a89d06a54b945d2bf70e050ef8312238ba2937263307ad31cbf225b8519b787454c20981413a87bbc739913
SSDEEP 24576:JncmI7wPYVwMJ+no+epio2SXI121PSdAl7/YzsJtO0:iLao+epio2SXI121Ke7gOt
TLSH
T15D55F9267664A5E9C1BBC0B8C2838F21792170C90B356FF745D5927A2F26EF86D3D324
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

902736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-384907623d7b3635.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

GetSystemTimeAsFileTime CloseHandle GetProcAddress LoadLibraryA GetNativeSystemInfo CompareStringOrdinal GetLastError WaitForSingleObject FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult FlushFileBuffers GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess InitializeSListHead CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW CopyFileExW FindFirstFileExW FindClose CreateHardLinkW ExitProcess WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex DeleteFileW HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetModuleHandleW FormatMessageW GetModuleFileNameW WaitForMultipleObjects GetTempPathW FindNextFileW SetUnhandledExceptionFilter GetStdHandle GetModuleHandleA

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW RegEnumKeyExW

ole32

CoInitializeEx CoCreateInstance

oleaut32

SysFreeString SysStringLen

ntdll

NtReadFile NtCreateNamedPipeFile NtWriteFile RtlNtStatusToDosError NtOpenFile

vcruntime140

__current_exception __current_exception_context _CxxThrowException memset memcmp memcpy __CxxFrameHandler3 memmove __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type _crt_atexit _configure_narrow_argv _register_onexit_function _get_initial_narrow_environment _initterm _initterm_e exit _exit _initialize_onexit_table __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback terminate _initialize_narrow_environment _cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_e91a5fc5bcc8f7883549e059160f97d5_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic