2026-10-25_b55698b7d99d53df588de5148068b3d7_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_b55698b7d99d53df588de5148068b3d7_akira_cobalt-strike_rusty-stealer_satacom
Size 362KB
Sample261026-sj455abd27
SHA256 5d93600b6df1baf759597a9d9297ff69033e77e502360424e9020b44abb92c4d
MD5 b55698b7d99d53df588de5148068b3d7
SHA1 e08ec5d388a3fa1380d4a0076c74a9a752e711e1
SHA512 21081cf51aad192db0f08557cf3f0740487fa0adc351ca433f84f57c1d2a31b17db68f61025fb2c9640bd80541644380a1a518a5fa79359edbff787747bf7de8
SSDEEP 6144:t+aSCXXBARzEv2rCjvG0AItqJtsMB2arZ8vr:t3tXhCJ+r
TLSH
T1ED742A26FA5554E9D1BBC03883568B62793234DE0B31ABFB059542393F29EF96E3C314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_b55698b7d99d53df588de5148068b3d7_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-25_b55698b7d99d53df588de5148068b3d7_akira_cobalt-strike_rusty-stealer_satacom

.exe 362KB

2026-10-25_b55698b7d99d53df588de5148068b3d7_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 080f79e72df05d037376eee5e05855c7
SHA256 5d93600b6df1baf759597a9d9297ff69033e77e502360424e9020b44abb92c4d
MD5 b55698b7d99d53df588de5148068b3d7
SHA1 e08ec5d388a3fa1380d4a0076c74a9a752e711e1
SHA512 21081cf51aad192db0f08557cf3f0740487fa0adc351ca433f84f57c1d2a31b17db68f61025fb2c9640bd80541644380a1a518a5fa79359edbff787747bf7de8
SSDEEP 6144:t+aSCXXBARzEv2rCjvG0AItqJtsMB2arZ8vr:t3tXhCJ+r
TLSH
T1ED742A26FA5554E9D1BBC03883568B62793234DE0B31ABFB059542393F29EF96E3C314
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

257632

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-2bf01cabfc33404f.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

GetFileAttributesW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime CloseHandle CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW FindFirstFileExW FindClose GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex DeleteFileW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW WaitForMultipleObjects GetModuleHandleA

ntdll

NtWriteFile NtOpenFile NtReadFile NtCreateNamedPipeFile RtlNtStatusToDosError

vcruntime140

memcpy memcmp __current_exception __C_specific_handler __CxxFrameHandler3 __current_exception_context memset _CxxThrowException memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit terminate _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_b55698b7d99d53df588de5148068b3d7_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic