2026-10-23_00d508f03883a708ff2f56faa6bba8ba_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-23_00d508f03883a708ff2f56faa6bba8ba_akira_cobalt-strike_rusty-stealer_satacom
Size 481KB
Sample261023-s31baayxev
SHA256 ca8d6fadbd59198b48ee197b696d19fa8ed3b048fe085a86307aa17de6ab66df
MD5 00d508f03883a708ff2f56faa6bba8ba
SHA1 f20a47c6f0ad9eb132dae4e1fd09579024ef1306
SHA512 d67d04ffaa1752ffa293060c682be01efb51fc4b6629442a38954ac6324e51727989af7dfc04c120991aeefce4298cbe823adcd99fd7b56721bdabea29c3dd6a
SSDEEP 6144:AOAhiadFSGREBFZNo7r9dG6saunxpw0PU17gPLdhETyVJ0t:AOAh5SGREBn2dGlauhHe
TLSH
T127A48D27778106BCE45AC070539A4A51B63278C60B369DFF16A851382F7AEE15F3FB18
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-23_00d508f03883a708ff2f56faa6bba8ba_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-23_00d508f03883a708ff2f56faa6bba8ba_akira_cobalt-strike_rusty-stealer_satacom

.exe 481KB

2026-10-23_00d508f03883a708ff2f56faa6bba8ba_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH c17666e65fc1cc4a54e545e913b18a72
SHA256 ca8d6fadbd59198b48ee197b696d19fa8ed3b048fe085a86307aa17de6ab66df
MD5 00d508f03883a708ff2f56faa6bba8ba
SHA1 f20a47c6f0ad9eb132dae4e1fd09579024ef1306
SHA512 d67d04ffaa1752ffa293060c682be01efb51fc4b6629442a38954ac6324e51727989af7dfc04c120991aeefce4298cbe823adcd99fd7b56721bdabea29c3dd6a
SSDEEP 6144:AOAhiadFSGREBFZNo7r9dG6saunxpw0PU17gPLdhETyVJ0t:AOAh5SGREBn2dGlauhHe
TLSH
T127A48D27778106BCE45AC070539A4A51B63278C60B369DFF16A851382F7AEE15F3FB18
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

301792

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

benchmark_large_world.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead CloseHandle GetLastError WaitForSingleObject SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW GetModuleHandleA IsProcessorFeaturePresent GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

_CxxThrowException __current_exception_context __current_exception __C_specific_handler memcpy __CxxFrameHandler3 memset memcmp memmove

api-ms-win-crt-math-l1-1-0

sin floor atan2 __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initterm _initterm_e exit _exit _initialize_narrow_environment _configure_narrow_argv __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _set_app_type _seh_filter_exe terminate _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-23_00d508f03883a708ff2f56faa6bba8ba_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic