2026-11-01_eb11608d68d42a4f50c61cdfa1d670b5_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_eb11608d68d42a4f50c61cdfa1d670b5_akira_rusty-stealer
Size 278KB
Sample261102-e22aasey6v
SHA256 e4aca381622f8d609b2f292fca367e41b61b380b8d4d53ee7f752168b3fc0a91
MD5 eb11608d68d42a4f50c61cdfa1d670b5
SHA1 2b833d28d9dbf26a1919a112bf68268d6fb32177
SHA512 69bc6862577c1744804010e2ca1696007efa1a9fdd4fbef1718ac365ded3973af0e639c541ad0409dea8085891c687b2eed576db315a6fb093d29c59696a0847
SSDEEP 3072:umjIIpWAep7mLIFE2Rl8tuqjv3CU31HDBJoZOx3L257jMxbVWpp:uSkHyLqL54vSS1jrrx3K57ARW
TLSH
T1E0544C17F36458E8D4BBC07981528B62BA3234D90B25D7E70691432D2F27EF9AD3D728
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_eb11608d68d42a4f50c61cdfa1d670b5_akira_rusty-stealer

File Explorer

2026-11-01_eb11608d68d42a4f50c61cdfa1d670b5_akira_rusty-stealer

.exe 278KB

2026-11-01_eb11608d68d42a4f50c61cdfa1d670b5_akira_rusty-stealer

IMPHASH 84bdaa009bf7eedf2ba2dae9e18dc9b7
SHA256 e4aca381622f8d609b2f292fca367e41b61b380b8d4d53ee7f752168b3fc0a91
MD5 eb11608d68d42a4f50c61cdfa1d670b5
SHA1 2b833d28d9dbf26a1919a112bf68268d6fb32177
SHA512 69bc6862577c1744804010e2ca1696007efa1a9fdd4fbef1718ac365ded3973af0e639c541ad0409dea8085891c687b2eed576db315a6fb093d29c59696a0847
SSDEEP 3072:umjIIpWAep7mLIFE2Rl8tuqjv3CU31HDBJoZOx3L257jMxbVWpp:uSkHyLqL54vSS1jrrx3K57ARW
TLSH
T1E0544C17F36458E8D4BBC07981528B62BA3234D90B25D7E70691432D2F27EF9AD3D728
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

192208

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-30fbf6feef8970fe.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

GetModuleHandleW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead CloseHandle GetLastError WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP IsProcessorFeaturePresent FormatMessageW GetModuleHandleA GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp __current_exception_context memmove _CxxThrowException __C_specific_handler __current_exception memcpy memset __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _seh_filter_exe _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_eb11608d68d42a4f50c61cdfa1d670b5_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic