2026-11-13_ccb38f0113c95936ff0c36c008a64bb6_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-13_ccb38f0113c95936ff0c36c008a64bb6_akira_rusty-stealer
Size 267KB
Sample261113-2sg7dssx9j
SHA256 94f18f14bc9190bc576d6140248b74b23b89533240e8571b174975ff8035f237
MD5 ccb38f0113c95936ff0c36c008a64bb6
SHA1 6be7e4636409cc9e35b2532ba6651f3fe09e9b2c
SHA512 ce77fe522b44ca09adce158b167949d1f66069f3b59b9cc829f1141d27c9b8b54ee292ec632627a4d18acf9e316bf9c69b95e614f9b4ddba59ef725a6bc9f52d
SSDEEP 6144:IQ1h/iLZg040V1Z2o0oN4vRsdSdvxjOH/:niOU6oSGf
TLSH
T15C445B4AB4421DFCE846C079C3559573B632708A0B29ADFF139492393F6BAE05F3A719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-13_ccb38f0113c95936ff0c36c008a64bb6_akira_rusty-stealer

File Explorer

2026-11-13_ccb38f0113c95936ff0c36c008a64bb6_akira_rusty-stealer

.exe 267KB

2026-11-13_ccb38f0113c95936ff0c36c008a64bb6_akira_rusty-stealer

IMPHASH 7594e65c2b5d6df4ce0b45ddee21d46b
SHA256 94f18f14bc9190bc576d6140248b74b23b89533240e8571b174975ff8035f237
MD5 ccb38f0113c95936ff0c36c008a64bb6
SHA1 6be7e4636409cc9e35b2532ba6651f3fe09e9b2c
SHA512 ce77fe522b44ca09adce158b167949d1f66069f3b59b9cc829f1141d27c9b8b54ee292ec632627a4d18acf9e316bf9c69b95e614f9b4ddba59ef725a6bc9f52d
SSDEEP 6144:IQ1h/iLZg040V1Z2o0oN4vRsdSdvxjOH/:niOU6oSGf
TLSH
T15C445B4AB4421DFCE846C079C3559573B632708A0B29ADFF139492393F6BAE05F3A719
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

206240

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

eksp.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetLastError WaitForSingleObject CloseHandle SetLastError GetCurrentThreadId GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW FormatMessageW GetModuleFileNameW IsProcessorFeaturePresent GetModuleHandleA GetSystemTimeAsFileTime

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

memmove memcmp __current_exception _CxxThrowException __C_specific_handler __current_exception_context memcpy memset __CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

pow round floor __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _set_app_type _initterm _seh_filter_exe exit _exit _configure_narrow_argv __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm_e _get_initial_narrow_environment terminate _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-13_ccb38f0113c95936ff0c36c008a64bb6_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic