2026-10-23_1713fd9da7db892750886034cb7d3176_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-23_1713fd9da7db892750886034cb7d3176_akira_cobalt-strike_rusty-stealer_satacom
Size 1.4MB
Sample261023-r9vhyaew2p
SHA256 129f8c8ef20c3b1009ec55a04ff25dd4cd6b62f75e2d0a745f51fbf8f4a1176c
MD5 1713fd9da7db892750886034cb7d3176
SHA1 3d91b49d4f57bd6409db96b5282020ffad7236ec
SHA512 73076230b55739dfde0694456f67a45548d3682ce80ba4232c08b1fa25ae48dcad4c98cc64e0367f0e13b9719f0ac1c9ab33e5cf392cfd16effdf7d963727a5e
SSDEEP 24576:t+L0S2XHg4xNdBrl+mJUN3jdLStysBo0FzteusPrEX0:t+LZ2XHg4xNjrVJk3jdLStfFztf
TLSH
T121650826766865EDC1BBC078C2838F61792170CA0B356FF345D5827A2E25EF86E3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-23_1713fd9da7db892750886034cb7d3176_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-23_1713fd9da7db892750886034cb7d3176_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.4MB

2026-10-23_1713fd9da7db892750886034cb7d3176_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH c21d9cddb703ec51012f1533d1ff08c5
SHA256 129f8c8ef20c3b1009ec55a04ff25dd4cd6b62f75e2d0a745f51fbf8f4a1176c
MD5 1713fd9da7db892750886034cb7d3176
SHA1 3d91b49d4f57bd6409db96b5282020ffad7236ec
SHA512 73076230b55739dfde0694456f67a45548d3682ce80ba4232c08b1fa25ae48dcad4c98cc64e0367f0e13b9719f0ac1c9ab33e5cf392cfd16effdf7d963727a5e
SSDEEP 24576:t+L0S2XHg4xNdBrl+mJUN3jdLStysBo0FzteusPrEX0:t+LZ2XHg4xNjrVJk3jdLStfFztf
TLSH
T121650826766865EDC1BBC078C2838F61792170CA0B356FF345D5827A2E25EF86E3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

977392

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-ca0a7b55fafbc4c4.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

GetSystemTimeAsFileTime CloseHandle GetProcAddress LoadLibraryA GetNativeSystemInfo GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess WideCharToMultiByte WaitForSingleObjectEx GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx GetLastError SetFileInformationByHandle FlushFileBuffers DuplicateHandle WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW CopyFileExW CreateDirectoryW GetFileInformationByHandleEx CreateFileW CreateEventW GetOverlappedResult InitializeSListHead DeleteFileW FindFirstFileExW FindClose CreateHardLinkW GetConsoleMode GetFullPathNameW GetModuleHandleA GetTempPathW GetModuleFileNameW GetModuleHandleW FormatMessageW ExitProcess WaitForMultipleObjects ReadFileEx SleepEx ReadFile CancelIo HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP CreateThread FreeEnvironmentStringsW GetFileAttributesW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW WriteFileEx QueryPerformanceCounter GetCurrentThreadId GetExitCodeProcess RtlLookupFunctionEntry RtlVirtualUnwind FindNextFileW SetUnhandledExceptionFilter GetFileInformationByHandle RtlCaptureContext

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW RegEnumKeyExW

ole32

CoInitializeEx CoCreateInstance

oleaut32

SysFreeString SysStringLen

ntdll

NtWriteFile RtlNtStatusToDosError NtOpenFile NtReadFile NtCreateNamedPipeFile

vcruntime140

__current_exception __current_exception_context _CxxThrowException memset memcmp __CxxFrameHandler3 memcpy memmove __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_set_app_type _crt_atexit _configure_narrow_argv _seh_filter_exe _get_initial_narrow_environment _initterm _initterm_e exit _exit _register_onexit_function __p___argc __p___argv _cexit _initialize_onexit_table _register_thread_local_exe_atexit_callback terminate _initialize_narrow_environment _c_exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-23_1713fd9da7db892750886034cb7d3176_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic