2026-11-13_bfe4a522cd65d791c209de7d5b55d778_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-13_bfe4a522cd65d791c209de7d5b55d778_akira_cobalt-strike_rusty-stealer_satacom
Size 289KB
Sample261113-3tapdaas3x
SHA256 74a7e34606a5bd18635c87eec8784746d71b1b779d1df4c613bb2b53eb809650
MD5 bfe4a522cd65d791c209de7d5b55d778
SHA1 5c6f7b39ca3292ca62539fd12867421e8ebca900
SHA512 e438d756e969061938000e6879942f4b5e109f97ef16123cb4d2a29fddf4bf0dec98dbd7a0e8fcd2d8ab3ae283184824a9f9e84dcc7ff8990c6f9f6418108754
SSDEEP 3072:mKYUc3f8i+jCLgF0qOsNMnMe1PxudsD4bm4WpjEyGW5J7I2sP/JVLOaLx0Cr0Vfa:mtJ+lOtnMeVxuuDTEl6q2OVLLLx0CYA
TLSH
T153543A217A5598ACD45AC07AC34A86B36A3274CA1B31F9FF02C182783F6E9F55E3C754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-13_bfe4a522cd65d791c209de7d5b55d778_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-11-13_bfe4a522cd65d791c209de7d5b55d778_akira_cobalt-strike_rusty-stealer_satacom

.exe 289KB

2026-11-13_bfe4a522cd65d791c209de7d5b55d778_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 424ce47cea67d45a00bcb0b14e9f75d1
SHA256 74a7e34606a5bd18635c87eec8784746d71b1b779d1df4c613bb2b53eb809650
MD5 bfe4a522cd65d791c209de7d5b55d778
SHA1 5c6f7b39ca3292ca62539fd12867421e8ebca900
SHA512 e438d756e969061938000e6879942f4b5e109f97ef16123cb4d2a29fddf4bf0dec98dbd7a0e8fcd2d8ab3ae283184824a9f9e84dcc7ff8990c6f9f6418108754
SSDEEP 3072:mKYUc3f8i+jCLgF0qOsNMnMe1PxudsD4bm4WpjEyGW5J7I2sP/JVLOaLx0Cr0Vfa:mtJ+lOtnMeVxuuDTEl6q2OVLLLx0CYA
TLSH
T153543A217A5598ACD45AC07AC34A86B36A3274CA1B31F9FF02C182783F6E9F55E3C754
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

207344

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-3adff251deb0593e.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

QueryPerformanceCounter SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime CloseHandle GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex GetLastError SetFileInformationByHandle DuplicateHandle WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW CreateDirectoryW GetFileInformationByHandleEx SwitchToThread CreateFileW CreateEventW GetOverlappedResult GetFileInformationByHandle FindFirstFileExW FindClose GetConsoleMode GetFullPathNameW GetCurrentThreadId GetModuleHandleA GetModuleFileNameW GetModuleHandleW FormatMessageW ExitProcess WaitForMultipleObjects ReadFileEx SleepEx ReadFile CancelIo HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleOutputCP CreateThread FreeEnvironmentStringsW GetFileAttributesW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW WriteFileEx GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

ntdll

NtOpenFile NtCreateNamedPipeFile NtReadFile NtWriteFile RtlNtStatusToDosError

vcruntime140

memcmp memset __current_exception __C_specific_handler __current_exception_context memcpy _CxxThrowException __CxxFrameHandler3 memmove

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initialize_narrow_environment _set_app_type _seh_filter_exe _initterm _initterm_e exit _exit terminate __p___argc __p___argv _cexit _c_exit _get_initial_narrow_environment _register_thread_local_exe_atexit_callback _crt_atexit _initialize_onexit_table _register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-13_bfe4a522cd65d791c209de7d5b55d778_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic