2026-10-22_9526b2c807e77e042e557362cff7525a_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_9526b2c807e77e042e557362cff7525a_akira_rusty-stealer
Size 12.6MB
Sample261024-espj5shw9m
SHA256 2b28714fe2755bd99acf3a745787d9f79ef25481f4dc6c658b68e754d8e66d66
MD5 9526b2c807e77e042e557362cff7525a
SHA1 989e251f008d4ec3ac88189cb3cdb35d17a6f938
SHA512 7f226eaa8dd3ffcf2187828e35eab5fa44d3e8920170ab2aac34a17fb20add35d122d5b7f17db1c58b1f4e15905266b7d6606302732028525d6855b9c91d5ef9
SSDEEP 98304:x1LcKpy5Q0bM8gtBqNwO+JyagIFbk+N0fAF67ur:LcaFQMRyROzOA0ft
TLSH
T152D6A427A23D5498E79AC074C2A32B2B9A357C4C56347EB37DD44A231F24BBC663D352
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_9526b2c807e77e042e557362cff7525a_akira_rusty-stealer

File Explorer

2026-10-22_9526b2c807e77e042e557362cff7525a_akira_rusty-stealer

.exe 12.6MB

2026-10-22_9526b2c807e77e042e557362cff7525a_akira_rusty-stealer

IMPHASH 78a204b6851f9b1c9116fb6fd8220cb4
SHA256 2b28714fe2755bd99acf3a745787d9f79ef25481f4dc6c658b68e754d8e66d66
MD5 9526b2c807e77e042e557362cff7525a
SHA1 989e251f008d4ec3ac88189cb3cdb35d17a6f938
SHA512 7f226eaa8dd3ffcf2187828e35eab5fa44d3e8920170ab2aac34a17fb20add35d122d5b7f17db1c58b1f4e15905266b7d6606302732028525d6855b9c91d5ef9
SSDEEP 98304:x1LcKpy5Q0bM8gtBqNwO+JyagIFbk+N0fAF67ur:LcaFQMRyROzOA0ft
TLSH
T152D6A427A23D5498E79AC074C2A32B2B9A357C4C56347EB37DD44A231F24BBC663D352
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11672412

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

source_asset_normalizer-a9f3218cdca30007.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

bcryptprimitives

ProcessPrng

kernel32

GetSystemTimeAsFileTime InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter CloseHandle GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo SetLastError GetSystemInfo CreateMutexA GetLastError GlobalMemoryStatusEx ReleaseMutex VirtualAlloc CreateFileMappingW K32GetProcessMemoryInfo GetCurrentProcess WaitForSingleObject GetProcessAffinityMask QueryPerformanceCounter UnmapViewOfFile MapViewOfFileEx WaitForSingleObjectEx ResetEvent CreateEventW InitializeCriticalSectionAndSpinCount GetProcAddress GetModuleHandleW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent CreateFileW GetFileSizeEx ReadFile SetFilePointerEx GetCurrentThreadId GetSystemDirectoryW VirtualQuery FreeLibrary GetModuleFileNameW LoadLibraryExW QueryPerformanceFrequency CompareStringOrdinal FreeEnvironmentStringsW WriteFileEx SleepEx GetFullPathNameW SetFileInformationByHandle SetFileTime GetProcessHeap HeapFree HeapReAlloc CreateThread GetCurrentProcessId ReadFileEx GetOverlappedResult DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess TerminateProcess AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW FindFirstFileExW FindClose ExitProcess SwitchToThread WideCharToMultiByte LoadLibraryA GetFinalPathNameByHandleW HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetFileType FormatMessageW WaitForMultipleObjects GetModuleHandleA IsDebuggerPresent UnhandledExceptionFilter

api-ms-win-crt-math-l1-1-0

fmod floor __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _configure_narrow_argv _get_initial_narrow_environment _initterm terminate _initterm_e exit _exit _seh_filter_exe _c_exit _crt_atexit _register_thread_local_exe_atexit_callback __p___argc _register_onexit_function __p___argv _set_app_type _initialize_onexit_table _cexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode __stdio_common_vswprintf

api-ms-win-crt-heap-l1-1-0

_aligned_malloc free _callnewh _set_new_mode malloc

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-locale-l1-1-0

_create_locale _configthreadlocale _free_locale

api-ms-win-crt-convert-l1-1-0

_wcstod_l

bcrypt

BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider BCryptDestroyHash BCryptCreateHash BCryptHashData BCryptFinishHash

ntdll

NtOpenFile RtlNtStatusToDosError NtReadFile NtWriteFile NtCreateNamedPipeFile

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception_context __current_exception __C_specific_handler __std_exception_copy __std_exception_destroy memcmp memmove memset memcpy __CxxFrameHandler3 _CxxThrowException

vcruntime140_1

__CxxFrameHandler4

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_9526b2c807e77e042e557362cff7525a_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-convert-l1-1-0

bcrypt

ntdll

userenv

vcruntime140

vcruntime140_1

generic