2026-10-22_1367b044fdb53679afd6f6bc0c96ba44_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_1367b044fdb53679afd6f6bc0c96ba44_akira_cobalt-strike_rusty-stealer_satacom
Size 1.6MB
Sample261024-zzs65act41
SHA256 693cf54f200b30230e1bebf56aea0f5bf13301a229f26a39b03c035ccefc4cf2
MD5 1367b044fdb53679afd6f6bc0c96ba44
SHA1 69afa3ba8ce1d2e19e4dfef3cec6a666ae650593
SHA512 76e7efe80ed233c9551b84b42113b64a6824482889d196d53ee96ecc5bc56d4fe5ec268cfff192fdf182af85581721e414e91f00c3a2a17c2cc088a0e5d9fbc3
SSDEEP 24576:oxQ+yvF7ZahnXKA1F4tDISFg8c14W4C30Wemex2ze+9SLW4C30Wemex2ze+9SzJH:ox6ZahXK3tnJJn
TLSH
T1F3755D15BAD686ACD016C0709F4E4B615A2538D60F32A9EF06946D7C3E3AFF01E3E749
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_1367b044fdb53679afd6f6bc0c96ba44_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-22_1367b044fdb53679afd6f6bc0c96ba44_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.6MB

2026-10-22_1367b044fdb53679afd6f6bc0c96ba44_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH f6099b598928fdb89d4bb85c748adac6
SHA256 693cf54f200b30230e1bebf56aea0f5bf13301a229f26a39b03c035ccefc4cf2
MD5 1367b044fdb53679afd6f6bc0c96ba44
SHA1 69afa3ba8ce1d2e19e4dfef3cec6a666ae650593
SHA512 76e7efe80ed233c9551b84b42113b64a6824482889d196d53ee96ecc5bc56d4fe5ec268cfff192fdf182af85581721e414e91f00c3a2a17c2cc088a0e5d9fbc3
SSDEEP 24576:oxQ+yvF7ZahnXKA1F4tDISFg8c14W4C30Wemex2ze+9SLW4C30Wemex2ze+9SzJH:ox6ZahXK3tnJJn
TLSH
T1F3755D15BAD686ACD016C0709F4E4B615A2538D60F32A9EF06946D7C3E3AFF01E3E749
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

938144

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

minecraft_parkour.pdb

user32

RegisterClassW GetSystemMetrics SendMessageW SetCursorPos GetClipCursor GetCursorPos ClientToScreen LoadIconW DestroyWindow PostMessageW GetMessageW DispatchMessageW TranslateMessage PeekMessageW GetActiveWindow GetForegroundWindow SetProcessDPIAware LoadCursorW GetClientRect ClipCursor ShowWindow RegisterRawInputDevices SetWindowLongPtrA SetClipboardData EmptyClipboard CloseClipboard GetClipboardData CreateIconIndirect ReleaseDC AdjustWindowRectEx CreateWindowExW GetDC GetWindowLongPtrA GetKeyState SetTimer DefWindowProcW KillTimer GetCaretPos GetRawInputData PostQuitMessage SetCursor GetWindowLongA SetWindowPos ShowCursor SetRect GetWindowRect MonitorFromPoint OpenClipboard

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

bcryptprimitives

ProcessPrng

imm32

ImmGetOpenStatus ImmAssociateContextEx ImmAssociateContext ImmCreateContext ImmGetCompositionStringW ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmSetOpenStatus ImmGetContext

gdi32

SetPixelFormat DescribePixelFormat DeleteObject CreateBitmap CreateDIBSection GetStockObject SwapBuffers ChoosePixelFormat

kernel32

GetConsoleMode WriteConsoleW GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep FormatMessageW GetModuleHandleA IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar CloseHandle GetModuleHandleW GetProcAddress FreeLibrary LoadLibraryA GlobalLock GlobalSize GlobalAlloc GlobalUnlock GetLastError WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime GetFileInformationByHandle GetFileInformationByHandleEx GetStdHandle CreateDirectoryW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW CopyFileExW FindFirstFileExW FindClose SwitchToThread WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex HeapAlloc GetModuleFileNameW

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

shell32

DragAcceptFiles DragQueryFileW

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile

vcruntime140

__current_exception_context __current_exception __C_specific_handler _CxxThrowException memcpy __CxxFrameHandler3 memcmp memset memmove

api-ms-win-crt-math-l1-1-0

cos sin tanhf floor fmod cosf sinf _hypot expf ceilf tanf __setusermatherr

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _configure_narrow_argv exit terminate _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _get_initial_narrow_environment _exit _initterm _initterm_e _set_app_type

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_1367b044fdb53679afd6f6bc0c96ba44_akira_cobalt-strike_rusty-stealer_satacom

user32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

imm32

gdi32

kernel32

api-ms-win-shcore-scaling-l1-1-1

shell32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic