2026-10-23_c1bb03137c2184827c8268aaf035632c_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-23_c1bb03137c2184827c8268aaf035632c_akira_cobalt-strike_rusty-stealer_satacom
Size 315KB
Sample261023-jlsqfa1s8p
SHA256 d17bf4d934f9398d9ae278ef491aa33b5276318fa335012fd9df72461cf23419
MD5 c1bb03137c2184827c8268aaf035632c
SHA1 c206267916f7b86cdaf0cee40396b74942d4ec80
SHA512 4db8102a3a481fb4249cc2b7c4d286002360221aa5b734c5820ca3f2d528fa4ff5f93a2122685ffb3f5a99a8fc1de23a91a298c41f78679a3769a15943fde067
SSDEEP 6144:1eJOeJWPu9Hdtt3++1I/T/H2eoy/NT5+OGBN:c/WPu1Ppg2a
TLSH
T1F1643A21BB66A4ECD55AC07883468B72693274CA0B31AAFF11D142383F6EDF56E3C754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-23_c1bb03137c2184827c8268aaf035632c_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-23_c1bb03137c2184827c8268aaf035632c_akira_cobalt-strike_rusty-stealer_satacom

.exe 315KB

2026-10-23_c1bb03137c2184827c8268aaf035632c_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 45bce86576a5d9ef0e0703aeecdf8f95
SHA256 d17bf4d934f9398d9ae278ef491aa33b5276318fa335012fd9df72461cf23419
MD5 c1bb03137c2184827c8268aaf035632c
SHA1 c206267916f7b86cdaf0cee40396b74942d4ec80
SHA512 4db8102a3a481fb4249cc2b7c4d286002360221aa5b734c5820ca3f2d528fa4ff5f93a2122685ffb3f5a99a8fc1de23a91a298c41f78679a3769a15943fde067
SSDEEP 6144:1eJOeJWPu9Hdtt3++1I/T/H2eoy/NT5+OGBN:c/WPu1Ppg2a
TLSH
T1F1643A21BB66A4ECD55AC07883468B72693274CA0B31AAFF11D142383F6EDF56E3C754
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

226608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-804917eb0a523508.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

CreateProcessW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId CreateMutexA CloseHandle FreeEnvironmentStringsW CompareStringOrdinal GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SwitchToThread QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW SetFileInformationByHandle GetCurrentProcess DuplicateHandle WaitForSingleObject GetStdHandle GetCurrentProcessId WriteFileEx SleepEx GetExitCodeProcess GetProcessHeap HeapFree FindFirstFileExW FindClose HeapReAlloc lstrlenW ReleaseMutex CreateEventW ReadFile GetOverlappedResult CancelIo GetModuleHandleW FormatMessageW GetModuleFileNameW ExitProcess ReadFileEx WaitForMultipleObjects CreateThread GetFullPathNameW GetModuleHandleA GetProcAddress HeapAlloc CreateFileW GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW GetConsoleMode GetSystemDirectoryW GetWindowsDirectoryW GetFileAttributesW GetConsoleOutputCP MultiByteToWideChar WriteConsoleW WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA

ntdll

NtOpenFile RtlNtStatusToDosError NtCreateNamedPipeFile NtReadFile NtWriteFile

vcruntime140

_CxxThrowException __current_exception_context __current_exception memset memmove memcmp __CxxFrameHandler3 memcpy __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _set_app_type __p___argc __p___argv _seh_filter_exe _c_exit _register_thread_local_exe_atexit_callback _cexit terminate _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-23_c1bb03137c2184827c8268aaf035632c_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic