2026-11-07_10c1b8a30329b3988cadd803393c6eaf_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-07_10c1b8a30329b3988cadd803393c6eaf_akira_cobalt-strike_rusty-stealer_satacom
Size 271KB
Sample261107-vggcdsev2p
SHA256 d186f30e5cbdb666001c5fe386fb1327cd846e95d0c67366465a0bacc5367a62
MD5 10c1b8a30329b3988cadd803393c6eaf
SHA1 d102c638a3cc5753841fb8508a93d9e5a84b325c
SHA512 8ca29f7dca33052846ecf32d7adec5f0572c9a0f136ff5a375ec37ca10c83b45e011a8849bd6d6aedd361c3982d4326369a00da0bf032392245695c4fc21dfed
SSDEEP 3072:tDzj6ylTbnXPONlUWnG4SG6K+NbPYLeyA8e9zNeM+Ja2NQS:tDiyl3P4ljGNUAXfgP
TLSH
T1A9444B13FA2059D9C1BEC038C2564A32767174C84F219BEB13845265EE57EF8AE7D3AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-07_10c1b8a30329b3988cadd803393c6eaf_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-11-07_10c1b8a30329b3988cadd803393c6eaf_akira_cobalt-strike_rusty-stealer_satacom

.exe 271KB

2026-11-07_10c1b8a30329b3988cadd803393c6eaf_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 486bc84f5f13778c40473a4cb4774d58
SHA256 d186f30e5cbdb666001c5fe386fb1327cd846e95d0c67366465a0bacc5367a62
MD5 10c1b8a30329b3988cadd803393c6eaf
SHA1 d102c638a3cc5753841fb8508a93d9e5a84b325c
SHA512 8ca29f7dca33052846ecf32d7adec5f0572c9a0f136ff5a375ec37ca10c83b45e011a8849bd6d6aedd361c3982d4326369a00da0bf032392245695c4fc21dfed
SSDEEP 3072:tDzj6ylTbnXPONlUWnG4SG6K+NbPYLeyA8e9zNeM+Ja2NQS:tDiyl3P4ljGNUAXfgP
TLSH
T1A9444B13FA2059D9C1BEC038C2564A32767174C84F219BEB13845265EE57EF8AE7D3AC
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

152112

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-5923f3e645cbeee7.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetProcessHeap HeapFree HeapReAlloc CloseHandle lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex GetLastError WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetConsoleMode GetModuleHandleA GetModuleHandleW FormatMessageW HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP QueryPerformanceCounter GetCurrentThreadId IsProcessorFeaturePresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp __current_exception_context _CxxThrowException __C_specific_handler __current_exception memmove memset memcpy __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e _get_initial_narrow_environment _exit _initialize_narrow_environment _configure_narrow_argv __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _set_app_type _seh_filter_exe exit _initialize_onexit_table _register_onexit_function _crt_atexit terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-07_10c1b8a30329b3988cadd803393c6eaf_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic