2026-10-22_0454cf2eebba566baef6e6c3031ea2da_akira_quasar-rat_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_0454cf2eebba566baef6e6c3031ea2da_akira_quasar-rat_rusty-stealer
Size 7.9MB
Sample261024-2xaccaew7n
SHA256 4fbf64046c495f2cda6cf686d42b2004c78490afc8936aa2cb5a680629da0edc
MD5 0454cf2eebba566baef6e6c3031ea2da
SHA1 ad51c3a5b981a3407b4a90ef3fd2132014e19efe
SHA512 e3fbf3d005e60626c751df2c904feb5867a7d356108e62272f6f8d493b2b670ad2cb5658ed123b3dfb0a778a342f68428386d44c3f25ea13a9aa10d43ceba52c
SSDEEP 49152:COiA/GFa77sQGKNhM1rNpjOiIBuXecTgeX2NsZ3toySzoYUhREOOX87JzHOnhDh9:FiAZMBOlYXe50Z0O0
TLSH
T1CF862992EB3DC2DAD71DE13C846B935337B0F08407A19F9782AC5D226E5AFC40E71669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_0454cf2eebba566baef6e6c3031ea2da_akira_quasar-rat_rusty-stealer

File Explorer

2026-10-22_0454cf2eebba566baef6e6c3031ea2da_akira_quasar-rat_rusty-stealer

.exe 7.9MB

2026-10-22_0454cf2eebba566baef6e6c3031ea2da_akira_quasar-rat_rusty-stealer

IMPHASH 50ce31ebd7185ff1eeb673400a4802d8
SHA256 4fbf64046c495f2cda6cf686d42b2004c78490afc8936aa2cb5a680629da0edc
MD5 0454cf2eebba566baef6e6c3031ea2da
SHA1 ad51c3a5b981a3407b4a90ef3fd2132014e19efe
SHA512 e3fbf3d005e60626c751df2c904feb5867a7d356108e62272f6f8d493b2b670ad2cb5658ed123b3dfb0a778a342f68428386d44c3f25ea13a9aa10d43ceba52c
SSDEEP 49152:COiA/GFa77sQGKNhM1rNpjOiIBuXecTgeX2NsZ3toySzoYUhREOOX87JzHOnhDh9:FiAZMBOlYXe50Z0O0
TLSH
T1CF862992EB3DC2DAD71DE13C846B935337B0F08407A19F9782AC5D226E5AFC40E71669
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2300540

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

target_disasm.pdb

bcryptprimitives

ProcessPrng

kernel32

CloseHandle GetModuleHandleA GetProcAddress Sleep IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter FindNextFileW GetModuleFileNameW GetLastError WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetFileInformationByHandle GetFileInformationByHandleEx TerminateProcess GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW FindFirstFileExW FindClose GetSystemInfo WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ntdll

RtlNtStatusToDosError NtWriteFile NtReadFile

vcruntime140

memmove __CxxFrameHandler3 __current_exception memset __C_specific_handler __current_exception_context memcpy strchr strstr strrchr memcmp _CxxThrowException

api-ms-win-crt-string-l1-1-0

strcpy strlen strcmp strncmp strncpy

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-heap-l1-1-0

_set_new_mode free calloc malloc realloc

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode __stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _c_exit _cexit _register_thread_local_exe_atexit_callback _register_onexit_function _initialize_onexit_table __p___argc _exit exit _initterm_e __p___argv _seh_filter_exe _set_app_type terminate _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_0454cf2eebba566baef6e6c3031ea2da_akira_quasar-rat_rusty-stealer

bcryptprimitives

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic