2026-11-01_d44aaff55a5d78ac8ce35fd398fcd719_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_d44aaff55a5d78ac8ce35fd398fcd719_akira_rusty-stealer
Size 175KB
Sample261102-jgem1stw3p
SHA256 f52d636b9a45b7114759e4c47ae806aa93bb5719bb17c5b0d36893060f1da136
MD5 d44aaff55a5d78ac8ce35fd398fcd719
SHA1 420be9e0715e90b6b73d1f6b2eb0752395ed5fb4
SHA512 35e8d7a8cb8769622d9b816182e45aaff2287d808f7d3ff44abe614d7026ea2042025c1a15b6c47f2bf11c27761a7a428297e0dbfd30c2f0fb7a6f6eadb973a1
SSDEEP 3072:lDcZ/wQ/6URv30wJBci46n/XtdYz1Ok8cZcIIVewnL:lDuZLRvkwJBcB6/LYz1OkSewnL
TLSH
T133047D22369090ECD45BC034825589AA757270FD0F215AFF16A5537C2F6AEF66F7C328
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_d44aaff55a5d78ac8ce35fd398fcd719_akira_rusty-stealer

File Explorer

2026-11-01_d44aaff55a5d78ac8ce35fd398fcd719_akira_rusty-stealer

.exe 175KB

2026-11-01_d44aaff55a5d78ac8ce35fd398fcd719_akira_rusty-stealer

IMPHASH 15a4c4f8b4737cb8b49b5e17fdeee43c
SHA256 f52d636b9a45b7114759e4c47ae806aa93bb5719bb17c5b0d36893060f1da136
MD5 d44aaff55a5d78ac8ce35fd398fcd719
SHA1 420be9e0715e90b6b73d1f6b2eb0752395ed5fb4
SHA512 35e8d7a8cb8769622d9b816182e45aaff2287d808f7d3ff44abe614d7026ea2042025c1a15b6c47f2bf11c27761a7a428297e0dbfd30c2f0fb7a6f6eadb973a1
SSDEEP 3072:lDcZ/wQ/6URv30wJBci46n/XtdYz1Ok8cZcIIVewnL:lDuZLRvkwJBcB6/LYz1OkSewnL
TLSH
T133047D22369090ECD45BC034825589AA757270FD0F215AFF16A5537C2F6AEF66F7C328
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

119328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-1dcc01945e457e09.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetModuleHandleW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetLastError WaitForSingleObject CloseHandle SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetFileInformationByHandle GetFileInformationByHandleEx GetStdHandle CreateDirectoryW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW CopyFileExW FindFirstFileExW FindClose GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP IsProcessorFeaturePresent FormatMessageW GetModuleHandleA GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memset __current_exception_context memmove _CxxThrowException __C_specific_handler __current_exception memcmp memcpy __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _configure_narrow_argv exit _exit _set_app_type __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _seh_filter_exe _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_d44aaff55a5d78ac8ce35fd398fcd719_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic