2026-11-10_fcf74c03bc04d84bb2aa6f4340512a8a_akira_quasar-rat_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-10_fcf74c03bc04d84bb2aa6f4340512a8a_akira_quasar-rat_rusty-stealer
Size 8.8MB
Sample261110-e17qpayyhv
SHA256 3e7bf912eb1e5230e7f911f94cd7f4c5be72c8b064774855e6c74cc3a0222d1f
MD5 fcf74c03bc04d84bb2aa6f4340512a8a
SHA1 fe262e91f7b332e1fbe6cd35808fa0d3ae79a235
SHA512 af9aed491fcf6a57eb19ba5cda5c1bb35d8272a287c103ead2f0454a17ac4a51364bdac2c3a2b027f96e498eed4be6269c1371fc5dc906eba80857ec1f22ce13
SSDEEP 98304:WTVF/f+Iq7VJpgxSnW7+y5z3pRZnoG43JmRde6klrKhAaL7rXjDKl:IeVXWhNZ8sBrHX
TLSH
T1F4963B43FAB5E4BCC475C530C7A66137FB31BC091237BAD397A54A227DA2BE06529B04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-10_fcf74c03bc04d84bb2aa6f4340512a8a_akira_quasar-rat_rusty-stealer

File Explorer

2026-11-10_fcf74c03bc04d84bb2aa6f4340512a8a_akira_quasar-rat_rusty-stealer

.exe 8.8MB

2026-11-10_fcf74c03bc04d84bb2aa6f4340512a8a_akira_quasar-rat_rusty-stealer

IMPHASH 1ff7ed7bd63b87f22fc3b936edd7b914
SHA256 3e7bf912eb1e5230e7f911f94cd7f4c5be72c8b064774855e6c74cc3a0222d1f
MD5 fcf74c03bc04d84bb2aa6f4340512a8a
SHA1 fe262e91f7b332e1fbe6cd35808fa0d3ae79a235
SHA512 af9aed491fcf6a57eb19ba5cda5c1bb35d8272a287c103ead2f0454a17ac4a51364bdac2c3a2b027f96e498eed4be6269c1371fc5dc906eba80857ec1f22ce13
SSDEEP 98304:WTVF/f+Iq7VJpgxSnW7+y5z3pRZnoG43JmRde6klrKhAaL7rXjDKl:IeVXWhNZ8sBrHX
TLSH
T1F4963B43FAB5E4BCC475C530C7A66137FB31BC091237BAD397A54A227DA2BE06529B04
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5024

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CopyFileExW CreateDirectoryW CreateEventW CreateFileMappingA CreateFileW CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DeleteFileW DuplicateHandle EnterCriticalSection ExitProcess FindClose FindFirstFileExW FormatMessageW FreeEnvironmentStringsW GetCommandLineW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessorNumber GetCurrentProcessorNumberEx GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileType GetFinalPathNameByHandleW GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTimePreciseAsFileTime GetTempPathW GetThreadGroupAffinity GetWindowsDirectoryW GlobalMemoryStatusEx HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection LeaveCriticalSection MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime ReadFile ReadFileEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetConsoleTextAttribute SetFileInformationByHandle SetFilePointerEx SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TlsGetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WriteConsoleW WriteFileEx __C_specific_handler

psapi

GetProcessMemoryInfo

bcryptprimitives

ProcessPrng

ntdll

NtCreateNamedPipeFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

userenv

GetUserProfileDirectoryW

libunwind

_GCC_specific_handler _Unwind_DeleteException _Unwind_GetDataRelBase _Unwind_GetIPInfo _Unwind_GetLanguageSpecificData _Unwind_GetRegionStart _Unwind_GetTextRelBase _Unwind_RaiseException _Unwind_Resume _Unwind_SetGR _Unwind_SetIP

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr atan ceil cos exp exp2 exp2f expf floor floorf fmaf fmaxf fminf fmod log log10 log2 pow powf rint round sin sinf sinh sqrt sqrtf tan trunc truncf

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

api-ms-win-crt-environment-l1-1-0

__p__environ

Name

.text

Size

6.1MB

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-10_fcf74c03bc04d84bb2aa6f4340512a8a_akira_quasar-rat_rusty-stealer

kernel32

psapi

bcryptprimitives

ntdll

api-ms-win-core-synch-l1-2-0

userenv

libunwind

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-environment-l1-1-0

generic