2026-10-22_975e77d8805c84b3b7a7b767aea5f97b_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_975e77d8805c84b3b7a7b767aea5f97b_akira_cobalt-strike_rusty-stealer_satacom
Size 1.4MB
Sample261024-ed5ykseb85
SHA256 5716af0042cf00c79ad3533accf73ca5b560855e3d7f26f6fe19cfe68e107495
MD5 975e77d8805c84b3b7a7b767aea5f97b
SHA1 237e13ecaa9fa48b5eda278d651f08a4b90248ca
SHA512 8a554b7b3eb085927c1516d2378f66faa4480d4e79e063d42ea9597e38bb966dc2f182953340fe85509fe7ee72a2cc55f810b23bdf807cf5bd31257c37405b84
SSDEEP 24576:ltEecdksJx7lhCyZhPSooNkYAYFr+WlWvnsPs:ltE/lhbZhPSooNkYAgJlWvO
TLSH
T1AE65F716766860D9C1BFC0B8C2938F617A2270C90B356BF745D1827A2F25EF86E7D724
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_975e77d8805c84b3b7a7b767aea5f97b_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-22_975e77d8805c84b3b7a7b767aea5f97b_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.4MB

2026-10-22_975e77d8805c84b3b7a7b767aea5f97b_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 3033942245bf2f408e0c6d20daeccd9b
SHA256 5716af0042cf00c79ad3533accf73ca5b560855e3d7f26f6fe19cfe68e107495
MD5 975e77d8805c84b3b7a7b767aea5f97b
SHA1 237e13ecaa9fa48b5eda278d651f08a4b90248ca
SHA512 8a554b7b3eb085927c1516d2378f66faa4480d4e79e063d42ea9597e38bb966dc2f182953340fe85509fe7ee72a2cc55f810b23bdf807cf5bd31257c37405b84
SSDEEP 24576:ltEecdksJx7lhCyZhPSooNkYAYFr+WlWvnsPs:ltE/lhbZhPSooNkYAgJlWvO
TLSH
T1AE65F716766860D9C1BFC0B8C2938F617A2270C90B356BF745D1827A2F25EF86E7D724
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1014784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-1552d176a940fabc.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetSystemTimeAsFileTime PeekNamedPipe CloseHandle CreateEventA WaitForMultipleObjects WaitForSingleObject OpenSemaphoreA ReleaseSemaphore SetEvent GetProcAddress LoadLibraryA GetNativeSystemInfo CompareStringOrdinal GetLastError FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult FlushFileBuffers GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW InitializeSListHead GetExitCodeProcess TerminateProcess GetStdHandle CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW CopyFileExW FindFirstFileExW FindClose CreateHardLinkW ExitProcess GetSystemInfo SwitchToThread WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex DeleteFileW HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep GetFileAttributesW GetModuleHandleW GetModuleFileNameW GetModuleHandleA GetTempPathW FindNextFileW SetUnhandledExceptionFilter CreateProcessW FormatMessageW

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW RegEnumKeyExW

ole32

CoInitializeEx CoCreateInstance

oleaut32

SysFreeString SysStringLen

ntdll

NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError NtOpenFile NtWriteFile

vcruntime140

__current_exception __current_exception_context _CxxThrowException memset memcmp memcpy __CxxFrameHandler3 memmove __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

__p___argv _seh_filter_exe _set_app_type _crt_atexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc terminate _cexit _c_exit _register_thread_local_exe_atexit_callback _register_onexit_function _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_975e77d8805c84b3b7a7b767aea5f97b_akira_cobalt-strike_rusty-stealer_satacom

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic