2026-11-07_2b15436dbbf1b2f82cec67c0c785f53f_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-07_2b15436dbbf1b2f82cec67c0c785f53f_akira_cobalt-strike_rusty-stealer_satacom
Size 752KB
Sample261107-ta6s2ac12v
SHA256 26a10062c9d5952c5d51e371324a02503717eb418c4382c9b12f0c57b4141448
MD5 2b15436dbbf1b2f82cec67c0c785f53f
SHA1 84335d682c7d29d623de8aa8478bbe614d0bf395
SHA512 b5527fb76fbd7362b1e651d37eaf8007b8c845fb6e0d1c11cf070ce71309411b09acb0e53efb5738d3ce99aeeffab18d8cc9dca98f2dbac0085841b498cc24df
SSDEEP 6144:t/tmFNYy0+/esTkjqEdKkYY1zkNNxnOPAve+BYkvJL6CjQrrSKsWhASXwYLYi7og:BKYy0+msSEVY+3OPSBYiQr9ZgeY2E
TLSH
T129F41926F77495D9C0BBC07982478F21B92138C90B256BE74681A37A2F39EF95E3D314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-07_2b15436dbbf1b2f82cec67c0c785f53f_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-11-07_2b15436dbbf1b2f82cec67c0c785f53f_akira_cobalt-strike_rusty-stealer_satacom

.exe 752KB

2026-11-07_2b15436dbbf1b2f82cec67c0c785f53f_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH e314e1c2c40a97adaed91d669311a80e
SHA256 26a10062c9d5952c5d51e371324a02503717eb418c4382c9b12f0c57b4141448
MD5 2b15436dbbf1b2f82cec67c0c785f53f
SHA1 84335d682c7d29d623de8aa8478bbe614d0bf395
SHA512 b5527fb76fbd7362b1e651d37eaf8007b8c845fb6e0d1c11cf070ce71309411b09acb0e53efb5738d3ce99aeeffab18d8cc9dca98f2dbac0085841b498cc24df
SSDEEP 6144:t/tmFNYy0+/esTkjqEdKkYY1zkNNxnOPAve+BYkvJL6CjQrrSKsWhASXwYLYi7og:BKYy0+msSEVY+3OPSBYiQr9ZgeY2E
TLSH
T129F41926F77495D9C0BBC07982478F21B92138C90B256BE74681A37A2F39EF95E3D314
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

488896

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-ffe37271ec681c24.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead CloseHandle GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex GetLastError SetFileInformationByHandle WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW CreateFileW GetConsoleMode GetFullPathNameW GetModuleHandleA GetModuleHandleW FormatMessageW HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP QueryPerformanceCounter GetCurrentThreadId IsProcessorFeaturePresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimeAsFileTime

ntdll

NtWriteFile NtReadFile RtlNtStatusToDosError

vcruntime140

memcmp __current_exception_context _CxxThrowException __C_specific_handler __current_exception memset memcpy memmove __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e _get_initial_narrow_environment _exit _initialize_narrow_environment _configure_narrow_argv __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _set_app_type _seh_filter_exe exit _initialize_onexit_table _register_onexit_function _crt_atexit terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-07_2b15436dbbf1b2f82cec67c0c785f53f_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic