2026-11-10_a3b58647f09a3af37ca5399aba6aadff_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-10_a3b58647f09a3af37ca5399aba6aadff_akira_rusty-stealer
Size 1.3MB
Sample261110-grj95sty8m
SHA256 1f6bf18e9231d1ad8e034a9392deb13dde79aeb03d04636a50694ee12d263d9d
MD5 a3b58647f09a3af37ca5399aba6aadff
SHA1 687536238e243d18a6990577b32e795c5be5810d
SHA512 ada394d4bd6cebdc57fce090084a2bdbb5617e090dc2124b0c6549b89b0c7cc5db735c1a3a2916b2f27a460097e2374049709dd452bd8d507d51cc82aa64a74c
SSDEEP 24576:wR8G83pvf8JGdI5+7FoESha876RCTYuJ8mJJ7fyK:w7285Z3ha8eRCTYuJ8CJ76
TLSH
T192652A11F66554E8C17EC038D2478E63BA3130CA0B396AF74AD542792FA8EF86E7D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-10_a3b58647f09a3af37ca5399aba6aadff_akira_rusty-stealer

File Explorer

2026-11-10_a3b58647f09a3af37ca5399aba6aadff_akira_rusty-stealer

.exe 1.3MB

2026-11-10_a3b58647f09a3af37ca5399aba6aadff_akira_rusty-stealer

IMPHASH 9d34cc1f9df9222679b22cae30aca82f
SHA256 1f6bf18e9231d1ad8e034a9392deb13dde79aeb03d04636a50694ee12d263d9d
MD5 a3b58647f09a3af37ca5399aba6aadff
SHA1 687536238e243d18a6990577b32e795c5be5810d
SHA512 ada394d4bd6cebdc57fce090084a2bdbb5617e090dc2124b0c6549b89b0c7cc5db735c1a3a2916b2f27a460097e2374049709dd452bd8d507d51cc82aa64a74c
SSDEEP 24576:wR8G83pvf8JGdI5+7FoESha876RCTYuJ8mJJ7fyK:w7285Z3ha8eRCTYuJ8CJ76
TLSH
T192652A11F66554E8C17EC038D2478E63BA3130CA0B396AF74AD542792FA8EF86E7D714
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1017328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

test_audio_sfx-89b408ba58c25587.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

LoadLibraryA GetLastError CompareStringOrdinal FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetProcAddress SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW FindFirstFileExW FindClose ExitProcess SwitchToThread WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetFileType FormatMessageW WaitForMultipleObjects GetModuleHandleA FindNextFileW GetSystemTimeAsFileTime GetModuleHandleW WaitForSingleObject GetSystemInfo SetConsoleTextAttribute GetConsoleScreenBufferInfo GetStdHandle CloseHandle InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent

ntdll

RtlNtStatusToDosError NtReadFile NtCreateNamedPipeFile NtOpenFile NtWriteFile

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception __C_specific_handler __current_exception_context memcmp memmove memset __CxxFrameHandler3 memcpy _CxxThrowException

api-ms-win-crt-math-l1-1-0

__setusermatherr fmod floor fmodf cosf sinf ceilf powf atan2f floorf roundf

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _register_onexit_function __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-10_a3b58647f09a3af37ca5399aba6aadff_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic