2026-11-03_52ab43777b1e91147a7af7171280edd1_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-03_52ab43777b1e91147a7af7171280edd1_akira_cobalt-strike_rusty-stealer_satacom
Size 202KB
Sample261104-zedwpsvtct
SHA256 8435693361491daaeabc1c060d46886c81ae4fb598129d922d09c5793583d8a3
MD5 52ab43777b1e91147a7af7171280edd1
SHA1 8279725ffdeca4d33ab0811ef33bca07793e9d3a
SHA512 ec1e6227281228d522110c78a6bf3ab82067689a3f48e05ca48af01d68fffc12cdeec057d166205897ac74a251a322e7798c0f0ee8ed256a6364ede38b39587f
SSDEEP 3072:CqsI3VeqKCCqWRq4En47a2fFNRXHmOPwJ+fsG:CqsI3Veq5684Ej4FNR3K+E
TLSH
T146145D16BA5164ECC4AFC07883464A73A93274CD0B216BFB47A04339AF69EF56E7C714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_52ab43777b1e91147a7af7171280edd1_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-11-03_52ab43777b1e91147a7af7171280edd1_akira_cobalt-strike_rusty-stealer_satacom

.exe 202KB

2026-11-03_52ab43777b1e91147a7af7171280edd1_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 6fac54d383124efb3a19f1fb7f2f97f9
SHA256 8435693361491daaeabc1c060d46886c81ae4fb598129d922d09c5793583d8a3
MD5 52ab43777b1e91147a7af7171280edd1
SHA1 8279725ffdeca4d33ab0811ef33bca07793e9d3a
SHA512 ec1e6227281228d522110c78a6bf3ab82067689a3f48e05ca48af01d68fffc12cdeec057d166205897ac74a251a322e7798c0f0ee8ed256a6364ede38b39587f
SSDEEP 3072:CqsI3VeqKCCqWRq4En47a2fFNRXHmOPwJ+fsG:CqsI3Veq5684Ej4FNR3K+E
TLSH
T146145D16BA5164ECC4AFC07883464A73A93274CD0B216BFB47A04339AF69EF56E7C714
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

135120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-eee5be7df59fbc1e.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

QueryPerformanceCounter SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetProcessHeap HeapFree HeapReAlloc CloseHandle lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex GetLastError WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetConsoleMode GetCurrentThreadId GetModuleHandleA GetModuleHandleW FormatMessageW HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memcpy memset __current_exception __C_specific_handler __current_exception_context memcmp _CxxThrowException __CxxFrameHandler3 memmove

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initialize_narrow_environment _set_app_type _seh_filter_exe _initterm _initterm_e exit _exit terminate __p___argc __p___argv _cexit _c_exit _get_initial_narrow_environment _register_thread_local_exe_atexit_callback _crt_atexit _initialize_onexit_table _register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_52ab43777b1e91147a7af7171280edd1_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic