2026-10-23_8ec929779f8e81894ac7431d1e646c91_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-23_8ec929779f8e81894ac7431d1e646c91_akira_cobalt-strike_rusty-stealer_satacom
Size 418KB
Sample261023-ltv7msc18p
SHA256 f0d5ed630c27d3ce234d8ebb98c4f9550586a76ceb716d2c1aacd3012c7248b4
MD5 8ec929779f8e81894ac7431d1e646c91
SHA1 4c6840a7a78a63f92386c1130907d82220a09129
SHA512 20c4a4a552d4b4ad32307ae79a5d30e2ca08e430c21a0e060ceb884632d4813a671fb53e77a0571fdbcee38556f39a5e370513ef57d9d431097196f54edce374
SSDEEP 6144:R0SpKZOfbn8AKnAcR/Q0GH0ZYvPZGQjgG/J16:AZOfwZz6HVjnJ
TLSH
T173947D22B74541FDD06AC075439A46A2B53278860B35ADFF16A8A1382F79EF05F3F718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-23_8ec929779f8e81894ac7431d1e646c91_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-23_8ec929779f8e81894ac7431d1e646c91_akira_cobalt-strike_rusty-stealer_satacom

.exe 418KB

2026-10-23_8ec929779f8e81894ac7431d1e646c91_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 9369bcde785e00608c06774228f0647c
SHA256 f0d5ed630c27d3ce234d8ebb98c4f9550586a76ceb716d2c1aacd3012c7248b4
MD5 8ec929779f8e81894ac7431d1e646c91
SHA1 4c6840a7a78a63f92386c1130907d82220a09129
SHA512 20c4a4a552d4b4ad32307ae79a5d30e2ca08e430c21a0e060ceb884632d4813a671fb53e77a0571fdbcee38556f39a5e370513ef57d9d431097196f54edce374
SSDEEP 6144:R0SpKZOfbn8AKnAcR/Q0GH0ZYvPZGQjgG/J16:AZOfwZz6HVjnJ
TLSH
T173947D22B74541FDD06AC075439A46A2B53278860B35ADFF16A8A1382F79EF05F3F718
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

263456

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

verify_legacy_traces.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead CloseHandle GetLastError WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW FindFirstFileExW FindClose GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW GetModuleHandleA IsProcessorFeaturePresent FindNextFileW GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError NtReadFile

vcruntime140

_CxxThrowException __current_exception_context __current_exception __C_specific_handler memcpy __CxxFrameHandler3 memmove memset memcmp

api-ms-win-crt-math-l1-1-0

atan2 sin __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initterm _initterm_e exit _exit _initialize_narrow_environment _configure_narrow_argv __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _set_app_type _seh_filter_exe terminate _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-23_8ec929779f8e81894ac7431d1e646c91_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic