2026-11-01_8b165e0913dd99c10d058c9e4ebcd70c_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_8b165e0913dd99c10d058c9e4ebcd70c_akira_rusty-stealer
Size 727KB
Sample261102-swclmsvtfy
SHA256 2d9ffea51a560b4fc1e02bc81eeec42aad7d5e1048033fc5e1cddf56591b5d5e
MD5 8b165e0913dd99c10d058c9e4ebcd70c
SHA1 3279d1749b24b85f73397642ed599bf232da2e7a
SHA512 2cd61c8cee50e4ea2358076af303014bf992a8664391720839268a9742626269a77b3520858843663ee927a1afb61b6fc0d4d7567815b102d8b2d9a3fbe5b757
SSDEEP 12288:+oKSxbwfazmrnd5HYl5Q2+PIWswsJmHFi/c4z7D:xxbwfAmrnd5HYl5Q2Gbsw7Fi/c4P
TLSH
T184F408157AAFADBDD459C874830A4A732E2130CB1B26B9FF418442393FA9AB45F3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_8b165e0913dd99c10d058c9e4ebcd70c_akira_rusty-stealer

File Explorer

2026-11-01_8b165e0913dd99c10d058c9e4ebcd70c_akira_rusty-stealer

.exe 727KB

2026-11-01_8b165e0913dd99c10d058c9e4ebcd70c_akira_rusty-stealer

IMPHASH 55fdbb9b3b2db81dcf63cdd8a8d4b5fb
SHA256 2d9ffea51a560b4fc1e02bc81eeec42aad7d5e1048033fc5e1cddf56591b5d5e
MD5 8b165e0913dd99c10d058c9e4ebcd70c
SHA1 3279d1749b24b85f73397642ed599bf232da2e7a
SHA512 2cd61c8cee50e4ea2358076af303014bf992a8664391720839268a9742626269a77b3520858843663ee927a1afb61b6fc0d4d7567815b102d8b2d9a3fbe5b757
SSDEEP 12288:+oKSxbwfazmrnd5HYl5Q2+PIWswsJmHFi/c4z7D:xxbwfAmrnd5HYl5Q2Gbsw7Fi/c4P
TLSH
T184F408157AAFADBDD459C874830A4A732E2130CB1B26B9FF418442393FA9AB45F3D714
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

521836

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

cacheharvest.pdb

kernel32

GetFileInformationByHandleEx GetFileInformationByHandle SetFileInformationByHandle GetFileType lstrlenW GetLastError GetFullPathNameW CloseHandle GetStdHandle GetConsoleMode SetConsoleMode SetConsoleTextAttribute GetConsoleScreenBufferInfo FindClose WideCharToMultiByte GetConsoleOutputCP FindNextFileW MultiByteToWideChar GetSystemTimeAsFileTime WriteConsoleW FindFirstFileExW SetLastError CreateFileW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead QueryPerformanceCounter ExitProcess GetModuleHandleA FormatMessageW GetModuleHandleW IsProcessorFeaturePresent CreateDirectoryW GetEnvironmentVariableW HeapAlloc RtlVirtualUnwind ReleaseMutex CreateMutexA GetCurrentProcessId GetCurrentProcess GetProcAddress LoadLibraryA WaitForSingleObjectEx RtlLookupFunctionEntry RtlCaptureContext GetCurrentDirectoryW GetCurrentThreadId GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler HeapReAlloc WaitForSingleObject HeapFree GetProcessHeap GetCommandLineW GetModuleFileNameW

shell32

SHGetKnownFolderPath

combase

CoTaskMemFree

ntdll

RtlNtStatusToDosError NtWriteFile NtReadFile

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

vcruntime140

__CxxFrameHandler3 memcpy memmove memset __current_exception_context __current_exception __C_specific_handler _CxxThrowException memcmp

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _crt_atexit _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _exit exit _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv terminate _seh_filter_exe _set_app_type _initterm_e

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_8b165e0913dd99c10d058c9e4ebcd70c_akira_rusty-stealer

kernel32

shell32

combase

ntdll

bcryptprimitives

api-ms-win-core-synch-l1-2-0

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic