2026-11-09_3ee18dada1b4689f3ecbd8b91363a648_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-09_3ee18dada1b4689f3ecbd8b91363a648_akira_cobalt-strike_rusty-stealer_satacom
Size 464KB
Sample261110-1tel8a118q
SHA256 c60430e8d2cf1427b88abc393a2c6070713611dfe3c55653c0260bb6fa3e692d
MD5 3ee18dada1b4689f3ecbd8b91363a648
SHA1 40d4f3e92e8d7edcfb94498060171bad0ecd31bf
SHA512 99c5ced02784f1299bf93e5f6370868c87804b5b99840aa752b9850b6ab522dd77e298f9678c5afd939d5fe83fe6f31e4f52df0d1799f543274f6e6b9dedfa84
SSDEEP 6144:dk3le5BKsfQRkH/n4AX1YG0V5WC2Vs4pH4VgMHNYjR3XsxCkO:Ee5gstHelz2mTtYjR3O
TLSH
T17DA43C16FA9658E8D159C074834A49336636B4CF1B22BEFB019492342F7AEF45F3CB19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_3ee18dada1b4689f3ecbd8b91363a648_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-11-09_3ee18dada1b4689f3ecbd8b91363a648_akira_cobalt-strike_rusty-stealer_satacom

.exe 464KB

2026-11-09_3ee18dada1b4689f3ecbd8b91363a648_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 70ef152960c359ec7db0270a4731738c
SHA256 c60430e8d2cf1427b88abc393a2c6070713611dfe3c55653c0260bb6fa3e692d
MD5 3ee18dada1b4689f3ecbd8b91363a648
SHA1 40d4f3e92e8d7edcfb94498060171bad0ecd31bf
SHA512 99c5ced02784f1299bf93e5f6370868c87804b5b99840aa752b9850b6ab522dd77e298f9678c5afd939d5fe83fe6f31e4f52df0d1799f543274f6e6b9dedfa84
SSDEEP 6144:dk3le5BKsfQRkH/n4AX1YG0V5WC2Vs4pH4VgMHNYjR3XsxCkO:Ee5gstHelz2mTtYjR3O
TLSH
T17DA43C16FA9658E8D159C074834A49336636B4CF1B22BEFB019492342F7AEF45F3CB19
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

330224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bm_select.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

bcryptprimitives

ProcessPrng

kernel32

GetSystemTimePreciseAsFileTime SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry CloseHandle GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex GetLastError SetFileInformationByHandle WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW CreateDirectoryW GetFileInformationByHandleEx CreateFileW GetFileInformationByHandle FindFirstFileExW FindClose GetConsoleMode GetFullPathNameW GetCurrentThreadId GetModuleHandleA GetModuleHandleW FormatMessageW QueryPerformanceFrequency HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP QueryPerformanceCounter RtlCaptureContext

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile

vcruntime140

__current_exception __C_specific_handler __current_exception_context memmove __CxxFrameHandler3 memcmp memcpy _CxxThrowException memset

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv terminate _get_initial_narrow_environment _initterm _initterm_e _crt_atexit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment exit _register_onexit_function _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-09_3ee18dada1b4689f3ecbd8b91363a648_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic