2026-10-22_06966566e129c172a01d4be686d8a303_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_06966566e129c172a01d4be686d8a303_akira_cobalt-strike_rusty-stealer_satacom
Size 255KB
Sample261024-2nxfhsfh75
SHA256 dae99bb1d9e7ec294d0b161dd3cda0e4fc7f2410111f4727300621d85c9befe5
MD5 06966566e129c172a01d4be686d8a303
SHA1 788e48cecb7ede05a9c9a8ae3299dfe01206df7f
SHA512 b8e733a3cdc779b18e0b1ba4c69afd9c5ce0a0f06ea1d2e00e3fb0a03d916b862f1a592f57bd18e6239f2b5ab99273dccee2c3a16d5e337d5adac65405cfb2dd
SSDEEP 3072:jBFLusnMyjqalDrt9Tg0s6e8TThiqT9hbCfpqVMaOfq7ldJFLYQ8GsIDcnSL:NFQyjRDrzg0s6DTwM9e+M5ExlTcW
TLSH
T11A444B11BA569CFCD45BC03983468A76653274DA1B32EAFF028142392F6AEF65F3C354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_06966566e129c172a01d4be686d8a303_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-22_06966566e129c172a01d4be686d8a303_akira_cobalt-strike_rusty-stealer_satacom

.exe 255KB

2026-10-22_06966566e129c172a01d4be686d8a303_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH dd5fc9e1e017a54e1050a4106a1ed60c
SHA256 dae99bb1d9e7ec294d0b161dd3cda0e4fc7f2410111f4727300621d85c9befe5
MD5 06966566e129c172a01d4be686d8a303
SHA1 788e48cecb7ede05a9c9a8ae3299dfe01206df7f
SHA512 b8e733a3cdc779b18e0b1ba4c69afd9c5ce0a0f06ea1d2e00e3fb0a03d916b862f1a592f57bd18e6239f2b5ab99273dccee2c3a16d5e337d5adac65405cfb2dd
SSDEEP 3072:jBFLusnMyjqalDrt9Tg0s6e8TThiqT9hbCfpqVMaOfq7ldJFLYQ8GsIDcnSL:NFQyjRDrzg0s6DTwM9e+M5ExlTcW
TLSH
T11A444B11BA569CFCD45BC03983468A76653274DA1B32EAFF028142392F6AEF65F3C354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

182656

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-01c3f0dd4c0efd9c.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

GetCurrentThreadId SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime CloseHandle GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex GetLastError SetFileInformationByHandle SetFileTime DuplicateHandle WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW CreateFileW GetConsoleMode GetModuleHandleW FormatMessageW GetFullPathNameW GetModuleHandleA GetModuleFileNameW HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP CreateThread ReadFileEx SleepEx GetFileAttributesW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW WriteFileEx QueryPerformanceCounter GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

ntdll

NtOpenFile NtWriteFile NtCreateNamedPipeFile RtlNtStatusToDosError

vcruntime140

__CxxFrameHandler3 memcmp __current_exception __C_specific_handler memcpy __current_exception_context memset _CxxThrowException memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit terminate _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_06966566e129c172a01d4be686d8a303_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic