2026-11-12_42826f7fa8635410ea680025555e9202_akira_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-12_42826f7fa8635410ea680025555e9202_akira_rusty-stealer
Size 1.1MB
Sample261113-e2e23azx3n
SHA256 0a712e073b54926e5b4d7bbfdfff70c0fef325132e0955493a7ff4e262f15186
MD5 42826f7fa8635410ea680025555e9202
SHA1 92001198a73ab99063277c05a081ff02a949aa36
SHA512 0be6b6ca3198e22a6fc6d9d6ada75614a7802800a92eac4e94895f1382c85c054d68af62bbf9a12f4037fa1ac7a49ddd6e3aa430fe4180adeed9084793728372
SSDEEP 24576:DQh63ZHPVkZmkbALoVMwbkGB3QxuL2y3IkJ:DQh2PVkZmkbAObkGB3Iul3IM
TLSH
T1FA451826666954D9C1BBC0B8C2979F62BA3130C90B352FF745D1827A2F25EF86E3D314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-12_42826f7fa8635410ea680025555e9202_akira_rusty-stealer

File Explorer

2026-11-12_42826f7fa8635410ea680025555e9202_akira_rusty-stealer

.exe 1.1MB

2026-11-12_42826f7fa8635410ea680025555e9202_akira_rusty-stealer

IMPHASH 074d5d2bba1cd3f32caeb2429adb9e8b
SHA256 0a712e073b54926e5b4d7bbfdfff70c0fef325132e0955493a7ff4e262f15186
MD5 42826f7fa8635410ea680025555e9202
SHA1 92001198a73ab99063277c05a081ff02a949aa36
SHA512 0be6b6ca3198e22a6fc6d9d6ada75614a7802800a92eac4e94895f1382c85c054d68af62bbf9a12f4037fa1ac7a49ddd6e3aa430fe4180adeed9084793728372
SSDEEP 24576:DQh63ZHPVkZmkbALoVMwbkGB3QxuL2y3IkJ:DQh2PVkZmkbAObkGB3Iul3IM
TLSH
T1FA451826666954D9C1BBC0B8C2979F62BA3130C90B352FF745D1827A2F25EF86E3D314
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

836056

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-45b8000662a07093.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

InitializeSListHead CloseHandle GetProcAddress LoadLibraryA GetNativeSystemInfo CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult FlushFileBuffers GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetStdHandle IsDebuggerPresent CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW CopyFileExW FindFirstFileExW FindClose CreateHardLinkW ExitProcess WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex DeleteFileW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetModuleHandleW FormatMessageW WaitForMultipleObjects GetModuleHandleA GetTempPathW IsProcessorFeaturePresent GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter FindNextFileW

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW RegEnumKeyExW

ole32

CoInitializeEx CoCreateInstance

oleaut32

SysStringLen SysFreeString

ntdll

NtWriteFile NtOpenFile NtReadFile NtCreateNamedPipeFile RtlNtStatusToDosError

vcruntime140

memmove __current_exception_context __current_exception __C_specific_handler __CxxFrameHandler3 memcpy memcmp _CxxThrowException memset

api-ms-win-crt-runtime-l1-1-0

_set_app_type _configure_narrow_argv _initialize_narrow_environment _seh_filter_exe terminate _initterm _initterm_e exit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _get_initial_narrow_environment _initialize_onexit_table _register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-12_42826f7fa8635410ea680025555e9202_akira_rusty-stealer

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic