2026-10-30_8a488c09a4db74c6e45c401a9dda9bc9_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-30_8a488c09a4db74c6e45c401a9dda9bc9_akira_rusty-stealer
Size 4.6MB
Sample261030-2rxkpasvaz
SHA256 f9df13191ee52e3b07c2a075bca44a97d8c359984b2939d157ffc38affaaddd1
MD5 8a488c09a4db74c6e45c401a9dda9bc9
SHA1 7f82da78245c70c73d528cc95a9a15c26e9e8c0d
SHA512 bf24eb73014c99f75d5d3f3a9eef34344e0ad009fe2e960fa61dc1e5bd47d7230ddfcc22ab79433136dbe38c82ffb28e1793eccf2f7d9f0458ab15b0d381e557
SSDEEP 49152:mZAXgEMOphgqniV2cJur52/cjFvGTn8KNEoZ2uexlxNpcWj+++Lho4nio+F5eJ8I:BILVmujmU74tq
TLSH
T1EB26E616A77950D9D27AC03882939B23BD20748D47347BFB8AC4926A2F24FF4AD3D355
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-30_8a488c09a4db74c6e45c401a9dda9bc9_akira_rusty-stealer

File Explorer

2026-10-30_8a488c09a4db74c6e45c401a9dda9bc9_akira_rusty-stealer

.exe 4.6MB

2026-10-30_8a488c09a4db74c6e45c401a9dda9bc9_akira_rusty-stealer

IMPHASH bad4b3d1a85fa54113d9a6dd71d9e1bf
SHA256 f9df13191ee52e3b07c2a075bca44a97d8c359984b2939d157ffc38affaaddd1
MD5 8a488c09a4db74c6e45c401a9dda9bc9
SHA1 7f82da78245c70c73d528cc95a9a15c26e9e8c0d
SHA512 bf24eb73014c99f75d5d3f3a9eef34344e0ad009fe2e960fa61dc1e5bd47d7230ddfcc22ab79433136dbe38c82ffb28e1793eccf2f7d9f0458ab15b0d381e557
SSDEEP 49152:mZAXgEMOphgqniV2cJur52/cjFvGTn8KNEoZ2uexlxNpcWj+++Lho4nio+F5eJ8I:BILVmujmU74tq
TLSH
T1EB26E616A77950D9D27AC03882939B23BD20748D47347BFB8AC4926A2F24FF4AD3D355
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3694032

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

es_file-47dda87e2654ccd1.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

kernel32

GetModuleHandleA IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent SetUnhandledExceptionFilter CloseHandle GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess TerminateProcess GetEnvironmentStringsW CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW RemoveDirectoryW CopyFileExW FindFirstFileExW FindClose ExitProcess GetSystemInfo SwitchToThread GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex DeleteFileW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetFileType GetModuleHandleW FormatMessageW WaitForMultipleObjects GetTempPathW FindNextFileW UnhandledExceptionFilter

ntdll

NtOpenFile NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile NtReadFile

userenv

GetUserProfileDirectoryW

vcruntime140

__C_specific_handler _CxxThrowException __current_exception_context memset __current_exception memcpy __CxxFrameHandler3 memcmp memmove

api-ms-win-crt-math-l1-1-0

fmod floor __setusermatherr log2

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-heap-l1-1-0

malloc calloc _set_new_mode free

api-ms-win-crt-utility-l1-1-0

_rotl64 _byteswap_uint64 _byteswap_ulong

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type _crt_atexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc __p___argv _cexit _c_exit _register_onexit_function _register_thread_local_exe_atexit_callback terminate _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-30_8a488c09a4db74c6e45c401a9dda9bc9_akira_rusty-stealer

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic