2026-10-23_8fa9d9205e9ad67dd963ddbf0e6f63d3_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-23_8fa9d9205e9ad67dd963ddbf0e6f63d3_akira_cobalt-strike_rusty-stealer_satacom
Size 1.4MB
Sample261023-lsk1aaaz21
SHA256 0ec605da946254816aa8418e543b1365060dc4b3bf96ff7238e346aeb5b2148b
MD5 8fa9d9205e9ad67dd963ddbf0e6f63d3
SHA1 3eaa961375ec0aa564ae1a32240eb5135c569f3c
SHA512 f154670bcc4ee3bafe2a611a02a474dffcb6d93aaafa0523338e0785dd538fa083ad9c1188e22e840f07608bcfd60a3be6dbdda864799303e0d9f782e99ff971
SSDEEP 24576:t+L0S2XHg4xNdBrl+mJUN3jdLStysBo0FzteusGrEX0:t+LZ2XHg4xNjrVJk3jdLStfFztf
TLSH
T1A0650826766865EDC1BBC078C2838F61792170CA0B356FF345D5827A2E25EF86E3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-23_8fa9d9205e9ad67dd963ddbf0e6f63d3_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-23_8fa9d9205e9ad67dd963ddbf0e6f63d3_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.4MB

2026-10-23_8fa9d9205e9ad67dd963ddbf0e6f63d3_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH c21d9cddb703ec51012f1533d1ff08c5
SHA256 0ec605da946254816aa8418e543b1365060dc4b3bf96ff7238e346aeb5b2148b
MD5 8fa9d9205e9ad67dd963ddbf0e6f63d3
SHA1 3eaa961375ec0aa564ae1a32240eb5135c569f3c
SHA512 f154670bcc4ee3bafe2a611a02a474dffcb6d93aaafa0523338e0785dd538fa083ad9c1188e22e840f07608bcfd60a3be6dbdda864799303e0d9f782e99ff971
SSDEEP 24576:t+L0S2XHg4xNdBrl+mJUN3jdLStysBo0FzteusGrEX0:t+LZ2XHg4xNjrVJk3jdLStfFztf
TLSH
T1A0650826766865EDC1BBC078C2838F61792170CA0B356FF345D5827A2E25EF86E3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

977392

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-ca0a7b55fafbc4c4.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

GetSystemTimeAsFileTime CloseHandle GetProcAddress LoadLibraryA GetNativeSystemInfo GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess WideCharToMultiByte WaitForSingleObjectEx GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx GetLastError SetFileInformationByHandle FlushFileBuffers DuplicateHandle WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW CopyFileExW CreateDirectoryW GetFileInformationByHandleEx CreateFileW CreateEventW GetOverlappedResult InitializeSListHead DeleteFileW FindFirstFileExW FindClose CreateHardLinkW GetConsoleMode GetFullPathNameW GetModuleHandleA GetTempPathW GetModuleFileNameW GetModuleHandleW FormatMessageW ExitProcess WaitForMultipleObjects ReadFileEx SleepEx ReadFile CancelIo HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP CreateThread FreeEnvironmentStringsW GetFileAttributesW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW WriteFileEx QueryPerformanceCounter GetCurrentThreadId GetExitCodeProcess RtlLookupFunctionEntry RtlVirtualUnwind FindNextFileW SetUnhandledExceptionFilter GetFileInformationByHandle RtlCaptureContext

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW RegEnumKeyExW

ole32

CoInitializeEx CoCreateInstance

oleaut32

SysFreeString SysStringLen

ntdll

NtWriteFile RtlNtStatusToDosError NtOpenFile NtReadFile NtCreateNamedPipeFile

vcruntime140

__current_exception __current_exception_context _CxxThrowException memset memcmp __CxxFrameHandler3 memcpy memmove __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_set_app_type _crt_atexit _configure_narrow_argv _seh_filter_exe _get_initial_narrow_environment _initterm _initterm_e exit _exit _register_onexit_function __p___argc __p___argv _cexit _initialize_onexit_table _register_thread_local_exe_atexit_callback terminate _initialize_narrow_environment _c_exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-23_8fa9d9205e9ad67dd963ddbf0e6f63d3_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic