2026-11-03_7d8ee5a6f891337d096001b75724af23_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-03_7d8ee5a6f891337d096001b75724af23_akira_rusty-stealer
Size 1.0MB
Sample261104-tfddnsbt4y
SHA256 ebec012992ca4c4dc4e80ad43b32fe4c595dc3eaa4105f4a9f60a2616680b4ba
MD5 7d8ee5a6f891337d096001b75724af23
SHA1 d07fcdbd647062f44cc5998349ab0aa714b51118
SHA512 a1b172013450fee735607a53ae5d8f0a568e75927726b8d2062e1dbd69e06b67e9d6fb644edef450172d9ca807509b720b661050a789cc5183da7a955d9189db
SSDEEP 24576:45Gr3j2/DZSS45xVeRyrZp1yiQJqoJ7NY:0c3n50yrZpwiQJtJ7m
TLSH
T1DF353915BA5A58ACC45AC87483568A735A3134CB1B35BDFF05C992383FA9AF51F3C328
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_7d8ee5a6f891337d096001b75724af23_akira_rusty-stealer

File Explorer

2026-11-03_7d8ee5a6f891337d096001b75724af23_akira_rusty-stealer

.exe 1.0MB

2026-11-03_7d8ee5a6f891337d096001b75724af23_akira_rusty-stealer

IMPHASH 432f4b87b3445583bc90fb29a367866b
SHA256 ebec012992ca4c4dc4e80ad43b32fe4c595dc3eaa4105f4a9f60a2616680b4ba
MD5 7d8ee5a6f891337d096001b75724af23
SHA1 d07fcdbd647062f44cc5998349ab0aa714b51118
SHA512 a1b172013450fee735607a53ae5d8f0a568e75927726b8d2062e1dbd69e06b67e9d6fb644edef450172d9ca807509b720b661050a789cc5183da7a955d9189db
SSDEEP 24576:45Gr3j2/DZSS45xVeRyrZp1yiQJqoJ7NY:0c3n50yrZpwiQJtJ7m
TLSH
T1DF353915BA5A58ACC45AC87483568A735A3134CB1B35BDFF05C992383FA9AF51F3C328
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

775504

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

print_vs_tag-d56e05ef95889faa.pdb

gdi32

SelectObject GetClipBox CreateRectRgnIndirect CreatePolygonRgn CombineRgn ExtCreatePen CreateSolidBrush CreateBrushIndirect SaveDC SelectClipRgn Polygon CreateEllipticRgnIndirect CreateRoundRectRgn ExcludeClipRect CreateRectRgn Rectangle MoveToEx RestoreDC LineTo RoundRect Ellipse GetStockObject Chord CreateFontIndirectA GetTextMetricsA SetTextColor CloseEnhMetaFile DeleteDC FillRgn DeleteObject ExtTextOutW DeleteEnhMetaFile CreateEnhMetaFileW SetTextAlign SetBkMode AbortDoc CreateDCA SetAbortProc StartPage ExtTextOutA GetDeviceCaps CreateMetaFileA CloseMetaFile StartDocA TextOutA DeleteMetaFile ExtSelectClipRgn TextOutW SetGraphicsMode SetWorldTransform ModifyWorldTransform GetGlyphIndicesW GetGlyphIndicesA EndPage GetFontLanguageInfo GetTextExtentPoint32W StretchDIBits EndDoc

kernel32

GetSystemTimeAsFileTime GetCurrentProcessId WideCharToMultiByte GetProcAddress LoadLibraryA ReadFile GetLastError GetProcessHeap HeapAlloc HeapFree GetModuleHandleW MultiByteToWideChar CloseHandle FormatMessageW IsDebuggerPresent IsProcessorFeaturePresent GetPrivateProfileSectionNamesA GetPrivateProfileStringA SetUnhandledExceptionFilter UnhandledExceptionFilter InitializeSListHead SetConsoleTextAttribute GetConsoleScreenBufferInfo CompareStringOrdinal FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW ReadFileEx GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetModuleHandleA WaitForMultipleObjects GetFileType GetFileAttributesW GetConsoleOutputCP GetConsoleMode WriteConsoleW GetModuleFileNameW ReleaseMutex CreateMutexA WaitForSingleObjectEx SwitchToThread GetSystemInfo ExitProcess FindClose FindFirstFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx GetStdHandle

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

user32

ReleaseDC GetDC OffsetRect FillRect IsDialogMessageA GetPropA GetParent PeekMessageA

bcryptprimitives

ProcessPrng

ntdll

NtOpenFile NtWriteFile NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception_context __C_specific_handler _CxxThrowException memcpy memmove memset memcmp __CxxFrameHandler3 __current_exception

api-ms-win-crt-math-l1-1-0

fmod powf sin floor pow __setusermatherr cos tan

api-ms-win-crt-runtime-l1-1-0

__p___argc _cexit _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _register_thread_local_exe_atexit_callback _set_app_type _seh_filter_exe _initialize_onexit_table _register_onexit_function _crt_atexit terminate __p___argv _c_exit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_7d8ee5a6f891337d096001b75724af23_akira_rusty-stealer

gdi32

kernel32

api-ms-win-core-synch-l1-2-0

user32

bcryptprimitives

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic