2026-11-01_df13c2dcb9439e792362be9ef5425def_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_df13c2dcb9439e792362be9ef5425def_akira_rusty-stealer
Size 921KB
Sample261102-gynadaec37
SHA256 96bbb5fa7ddd0b36c94f0c156a90fd04b5eb95a44facdb16172555be8459860b
MD5 df13c2dcb9439e792362be9ef5425def
SHA1 2dad5af062bef9c5819410e82507a2e4c6eb23df
SHA512 96d4355b6311757ebdffc9553a82b13f197a600e3524186d80596fe981d47beded623a104c64d535f7ac3e985daf1780024ab2b550f184585f153a199b35a701
SSDEEP 12288:bEtP06ivlm9SH2VhPkN4/HgibiwtfI+R0pueXnVY5XY7+mi0xH:bE2m9SHchJHgibiQfI+RLe3qK7+F
TLSH
T1B6152925BA5A58ADC556C47083468A736A7170CF1B36B9FF01D981383FA9AF51F3C328
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_df13c2dcb9439e792362be9ef5425def_akira_rusty-stealer

File Explorer

2026-11-01_df13c2dcb9439e792362be9ef5425def_akira_rusty-stealer

.exe 921KB

2026-11-01_df13c2dcb9439e792362be9ef5425def_akira_rusty-stealer

IMPHASH 8fe42e07cb898eb0ee3d71fa8d070c75
SHA256 96bbb5fa7ddd0b36c94f0c156a90fd04b5eb95a44facdb16172555be8459860b
MD5 df13c2dcb9439e792362be9ef5425def
SHA1 2dad5af062bef9c5819410e82507a2e4c6eb23df
SHA512 96d4355b6311757ebdffc9553a82b13f197a600e3524186d80596fe981d47beded623a104c64d535f7ac3e985daf1780024ab2b550f184585f153a199b35a701
SSDEEP 12288:bEtP06ivlm9SH2VhPkN4/HgibiwtfI+R0pueXnVY5XY7+mi0xH:bE2m9SHchJHgibiQfI+RLe3qK7+F
TLSH
T1B6152925BA5A58ADC556C47083468A736A7170CF1B36B9FF01D981383FA9AF51F3C328
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

690000

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

style_edit-e35af6b42500ccce.pdb

kernel32

GetSystemTimeAsFileTime IsProcessorFeaturePresent CloseHandle IsDebuggerPresent GetLastError GetModuleHandleW ReadFile GetProcessHeap HeapAlloc HeapFree FormatMessageW GetProcAddress LoadLibraryA WideCharToMultiByte GetCurrentProcessId MultiByteToWideChar SetUnhandledExceptionFilter UnhandledExceptionFilter InitializeSListHead GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo CompareStringOrdinal FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW ReadFileEx GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW FindFirstFileExW FindClose ExitProcess GetSystemInfo SwitchToThread WaitForSingleObjectEx CreateMutexA ReleaseMutex GetModuleFileNameW WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetFileType WaitForMultipleObjects GetModuleHandleA

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

bcryptprimitives

ProcessPrng

ntdll

NtOpenFile NtWriteFile RtlNtStatusToDosError NtReadFile NtCreateNamedPipeFile

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception_context memset memcmp memcpy memmove __CxxFrameHandler3 __C_specific_handler _CxxThrowException __current_exception

api-ms-win-crt-math-l1-1-0

fmod floor __setusermatherr

api-ms-win-crt-runtime-l1-1-0

__p___argc _get_initial_narrow_environment _cexit _crt_atexit _initterm _register_onexit_function _initialize_onexit_table _initterm_e exit _register_thread_local_exe_atexit_callback _c_exit _initialize_narrow_environment _configure_narrow_argv _exit terminate _seh_filter_exe _set_app_type __p___argv

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_df13c2dcb9439e792362be9ef5425def_akira_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic