2026-10-23_7f72c3d9a99604db1a4260bf74bc6ab6_akira_cobalt-strike_poet-rat_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-23_7f72c3d9a99604db1a4260bf74bc6ab6_akira_cobalt-strike_poet-rat_rusty-stealer_satacom
Size 2.2MB
Sample261023-mfbrhsds9k
SHA256 6926f069ac7e5412a18066819597858e313cbe296298a4a045bbc575592e34f7
MD5 7f72c3d9a99604db1a4260bf74bc6ab6
SHA1 160ac42f1856eb03bb56867ba244331e3e550612
SHA512 5e25ac76704ae31d388988b2f6625267de25471c920b8f65eea57d4031192f480141bfb9bb40078d40f40fb280215afef7c4df5ce42bab361a1ddfff92effa2d
SSDEEP 24576:wII+BOHFXta4+fNfcRqFLz811DR4e4CMuAAdN3W4C30Wemex2ze+9SMW4C30Wem7:wII+BOlda422qFP8HR4e42gp1p
TLSH
T110A56B16BB9A85ACD056C0719F4F4A62592138D70B32A9EB02D46D7C2F7AFF01E3E705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-23_7f72c3d9a99604db1a4260bf74bc6ab6_akira_cobalt-strike_poet-rat_rusty-stealer_satacom

File Explorer

2026-10-23_7f72c3d9a99604db1a4260bf74bc6ab6_akira_cobalt-strike_poet-rat_rusty-stealer_satacom

.exe 2.2MB

2026-10-23_7f72c3d9a99604db1a4260bf74bc6ab6_akira_cobalt-strike_poet-rat_rusty-stealer_satacom

IMPHASH c5925d73f335e0283cdbba2e1630e285
SHA256 6926f069ac7e5412a18066819597858e313cbe296298a4a045bbc575592e34f7
MD5 7f72c3d9a99604db1a4260bf74bc6ab6
SHA1 160ac42f1856eb03bb56867ba244331e3e550612
SHA512 5e25ac76704ae31d388988b2f6625267de25471c920b8f65eea57d4031192f480141bfb9bb40078d40f40fb280215afef7c4df5ce42bab361a1ddfff92effa2d
SSDEEP 24576:wII+BOHFXta4+fNfcRqFLz811DR4e4CMuAAdN3W4C30Wemex2ze+9SMW4C30Wem7:wII+BOlda422qFP8HR4e42gp1p
TLSH
T110A56B16BB9A85ACD056C0719F4F4A62592138D70B32A9EB02D46D7C2F7AFF01E3E705
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1378000

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

minecraft_parkour.pdb

user32

CloseClipboard EmptyClipboard SetRect DestroyWindow PostMessageW GetMessageW DispatchMessageW GetClipboardData PeekMessageW SetWindowLongPtrA RegisterRawInputDevices ShowWindow SetProcessDPIAware GetClientRect ClientToScreen GetClipCursor OpenClipboard TranslateMessage ClipCursor GetActiveWindow GetForegroundWindow SetCursorPos SendMessageW CreateIconIndirect ReleaseDC MonitorFromPoint ShowCursor SetWindowPos SetClipboardData LoadCursorW LoadIconW RegisterClassW GetSystemMetrics AdjustWindowRectEx CreateWindowExW GetDC GetWindowLongPtrA GetKeyState SetTimer DefWindowProcW KillTimer GetCaretPos GetRawInputData PostQuitMessage SetCursor GetWindowLongA GetWindowRect

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

bcryptprimitives

ProcessPrng

imm32

ImmSetOpenStatus ImmAssociateContextEx ImmAssociateContext ImmCreateContext ImmGetCompositionStringW ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetOpenStatus ImmGetContext

gdi32

SetPixelFormat DescribePixelFormat DeleteObject CreateBitmap CreateDIBSection GetStockObject SwapBuffers ChoosePixelFormat

kernel32

GetConsoleMode GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer IsProcessorFeaturePresent Sleep GetFileAttributesW FormatMessageW GetModuleHandleA MultiByteToWideChar GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter WriteConsoleW CloseHandle FreeLibrary GlobalLock GlobalSize GlobalAlloc GlobalUnlock GetProcAddress LoadLibraryA GetModuleHandleW GetLastError CompareStringOrdinal FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread GetCurrentProcessId ReadFileEx GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess TerminateProcess GetStdHandle CreateDirectoryW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW CopyFileExW FindFirstFileExW FindClose ExitProcess SwitchToThread WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex HeapAlloc GetModuleFileNameW

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

shell32

DragAcceptFiles DragQueryFileW

ntdll

RtlNtStatusToDosError NtReadFile NtOpenFile NtCreateNamedPipeFile NtWriteFile

vcruntime140

__current_exception_context __current_exception __C_specific_handler _CxxThrowException __CxxFrameHandler3 memcmp memcpy memmove memset

api-ms-win-crt-math-l1-1-0

tanf cos sin tanhf floor fmod atan2 pow _hypot cosf sinf expf ceilf __setusermatherr

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _configure_narrow_argv exit terminate _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _get_initial_narrow_environment _exit _initterm _initterm_e _set_app_type

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-23_7f72c3d9a99604db1a4260bf74bc6ab6_akira_cobalt-strike_poet-rat_rusty-stealer_satacom

user32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

imm32

gdi32

kernel32

api-ms-win-shcore-scaling-l1-1-1

shell32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic