2026-10-22_a9cd5ecce059529179b0020ae496606f_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_a9cd5ecce059529179b0020ae496606f_akira_rusty-stealer
Size 1.9MB
Sample261024-bmhb4aea24
SHA256 6b09ec3e167fc08522165a25e671d6731f9f0d4befe86d08b7ca1f009178253d
MD5 a9cd5ecce059529179b0020ae496606f
SHA1 54b8291e38730c0b1ae8d1a4ee699222d5b248a3
SHA512 d0a72869d164bc89ba38171f7f2b3f032dcfa186b2b6aada5e68b46506b6a888ce247abdff89ba906e31f3c6beece0497e97b96c839d9d11ec2524f49dcbd265
SSDEEP 49152:XH50EuRWaE7wi3bXr/2vLeaSYbOad64GZ:hS96
TLSH
T1EB95F826A37864E9C1BBC07882839F61B92170D90B356FF744D182AA2F25EFC6D7D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_a9cd5ecce059529179b0020ae496606f_akira_rusty-stealer

File Explorer

2026-10-22_a9cd5ecce059529179b0020ae496606f_akira_rusty-stealer

.exe 1.9MB

2026-10-22_a9cd5ecce059529179b0020ae496606f_akira_rusty-stealer

IMPHASH e937abadb36ecda810d5bf2065e99d1d
SHA256 6b09ec3e167fc08522165a25e671d6731f9f0d4befe86d08b7ca1f009178253d
MD5 a9cd5ecce059529179b0020ae496606f
SHA1 54b8291e38730c0b1ae8d1a4ee699222d5b248a3
SHA512 d0a72869d164bc89ba38171f7f2b3f032dcfa186b2b6aada5e68b46506b6a888ce247abdff89ba906e31f3c6beece0497e97b96c839d9d11ec2524f49dcbd265
SSDEEP 49152:XH50EuRWaE7wi3bXr/2vLeaSYbOad64GZ:hS96
TLSH
T1EB95F826A37864E9C1BBC07882839F61B92170D90B356FF744D182AA2F25EFC6D7D354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1427368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-d0a5522904ab1fdc.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

kernel32

InitializeSListHead CloseHandle WaitForMultipleObjects PeekNamedPipe OpenSemaphoreA WaitForSingleObject ReleaseSemaphore SetEvent CreateEventA GetProcAddress LoadLibraryA GetNativeSystemInfo CompareStringOrdinal GetLastError FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult FlushFileBuffers GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess IsDebuggerPresent TerminateProcess GetEnvironmentStringsW GetStdHandle CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW CopyFileExW FindFirstFileExW FindClose CreateHardLinkW ExitProcess GetSystemInfo WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex DeleteFileW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep GetFileAttributesW GetModuleHandleW IsProcessorFeaturePresent GetModuleHandleA GetTempPathW FindNextFileW GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter FormatMessageW

advapi32

RegQueryValueExW RegOpenKeyExW RegEnumKeyExW RegCloseKey

ole32

CoCreateInstance CoInitializeEx

oleaut32

SysStringLen SysFreeString

ntdll

NtOpenFile NtWriteFile NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError

vcruntime140

__current_exception_context __CxxFrameHandler3 __C_specific_handler memset memcmp memmove __current_exception _CxxThrowException memcpy

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _get_initial_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _initialize_narrow_environment _initialize_onexit_table _register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_a9cd5ecce059529179b0020ae496606f_akira_rusty-stealer

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic