2026-10-28_1d66b7288e2f9ae4f19826c48ae194f4_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-28_1d66b7288e2f9ae4f19826c48ae194f4_akira_cobalt-strike_rusty-stealer_satacom
Size 1.5MB
Sample261030-k16fhsct2q
SHA256 4cc8955a059304938a61b2afdac02e0d6514aaf8916b961c735e51c1a5a37bd6
MD5 1d66b7288e2f9ae4f19826c48ae194f4
SHA1 095df3c3925ce470d6d6362c0fb1942fd7b682b0
SHA512 6e6e89b642e74c64016e6d54f1d867ae2abf9887f078c0538aebd3dec6bc9cb92d0d281dc89eb9d35416bd7c3c7562db6b47946602ee0260271b4b5dc86223d6
SSDEEP 24576:fBxNatta0Tqfziv9qKJLnCHyEZPmw9TPJEapEStm:fBGttafziv9qKJoB159zxpLt
TLSH
T19A65F727B76865D9C1BBC078C2839F26792230D90B392FF7458182792E25EF86E7D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_1d66b7288e2f9ae4f19826c48ae194f4_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-10-28_1d66b7288e2f9ae4f19826c48ae194f4_akira_cobalt-strike_rusty-stealer_satacom

.exe 1.5MB

2026-10-28_1d66b7288e2f9ae4f19826c48ae194f4_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH a82af80c07392aa972258cfb9c22725c
SHA256 4cc8955a059304938a61b2afdac02e0d6514aaf8916b961c735e51c1a5a37bd6
MD5 1d66b7288e2f9ae4f19826c48ae194f4
SHA1 095df3c3925ce470d6d6362c0fb1942fd7b682b0
SHA512 6e6e89b642e74c64016e6d54f1d867ae2abf9887f078c0538aebd3dec6bc9cb92d0d281dc89eb9d35416bd7c3c7562db6b47946602ee0260271b4b5dc86223d6
SSDEEP 24576:fBxNatta0Tqfziv9qKJLnCHyEZPmw9TPJEapEStm:fBGttafziv9qKJoB159zxpLt
TLSH
T19A65F727B76865D9C1BBC078C2839F26792230D90B392FF7458182792E25EF86E7D714
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1053328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-e3cde3fccc45795e.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

GetProcAddress LoadLibraryA GetNativeSystemInfo PeekNamedPipe CloseHandle CreateEventA WaitForMultipleObjects WaitForSingleObject OpenSemaphoreA ReleaseSemaphore SetEvent GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess WideCharToMultiByte WaitForSingleObjectEx GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx GetLastError SetFileInformationByHandle FlushFileBuffers DuplicateHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW CopyFileExW CreateDirectoryW GetFileInformationByHandleEx SwitchToThread CreateFileW InitializeSListHead GetOverlappedResult GetFileInformationByHandle DeleteFileW FindFirstFileExW FindClose CreateHardLinkW GetConsoleMode GetFullPathNameW GetCurrentThreadId GetModuleHandleA GetTempPathW GetModuleFileNameW GetModuleHandleW FormatMessageW ExitProcess ReadFileEx SleepEx ReadFile QueryPerformanceFrequency CancelIo HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep CreateThread FreeEnvironmentStringsW GetFileAttributesW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW WriteFileEx QueryPerformanceCounter GetExitCodeProcess IsProcessorFeaturePresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind FindNextFileW GetSystemTimeAsFileTime IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter CreateEventW TerminateProcess

advapi32

RegEnumKeyExW RegCloseKey RegQueryValueExW RegOpenKeyExW

ole32

CoInitializeEx CoCreateInstance

oleaut32

SysStringLen SysFreeString

ntdll

RtlNtStatusToDosError NtReadFile NtOpenFile NtWriteFile NtCreateNamedPipeFile

vcruntime140

__CxxFrameHandler3 __current_exception_context __current_exception __C_specific_handler memmove memcmp _CxxThrowException memcpy memset

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initialize_narrow_environment _set_app_type _seh_filter_exe _initterm _initterm_e exit _exit terminate __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _get_initial_narrow_environment _crt_atexit _initialize_onexit_table _register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_1d66b7288e2f9ae4f19826c48ae194f4_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic