2026-11-11_57060733d541bc2b1b23b8ebb94b554b_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-11_57060733d541bc2b1b23b8ebb94b554b_akira_cobalt-strike_rusty-stealer_satacom
Size 10.6MB
Sample261113-n9779at19k
SHA256 978950accba7d56f459e8d732ee01917a16193e9aa5a059f05e02df61d993166
MD5 57060733d541bc2b1b23b8ebb94b554b
SHA1 1e172cd6374bec72bb920b7900f638e5271249d1
SHA512 fc6c62b773c99e6ac013fd14e1a6bf868bdfd61831b9915ca7c8641e653eed2f1f961b3be729a265a8d5a947bf798823030360beae314ee6c6e9fbf4fc26aca9
SSDEEP 98304:ZRfqZKFd49OOonn78CqIBN0YVUSXu3aqy2:ZjFb72aqR
TLSH
T1CCB618157B9A95ADC46AC074874A4AB26E3270DB0F39B9FF48C542383E79EF41E38744
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-11_57060733d541bc2b1b23b8ebb94b554b_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-11-11_57060733d541bc2b1b23b8ebb94b554b_akira_cobalt-strike_rusty-stealer_satacom

.exe 10.6MB

2026-11-11_57060733d541bc2b1b23b8ebb94b554b_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 5f8dc0322ce092b47f327691cbd0ee8e
SHA256 978950accba7d56f459e8d732ee01917a16193e9aa5a059f05e02df61d993166
MD5 57060733d541bc2b1b23b8ebb94b554b
SHA1 1e172cd6374bec72bb920b7900f638e5271249d1
SHA512 fc6c62b773c99e6ac013fd14e1a6bf868bdfd61831b9915ca7c8641e653eed2f1f961b3be729a265a8d5a947bf798823030360beae314ee6c6e9fbf4fc26aca9
SSDEEP 98304:ZRfqZKFd49OOonn78CqIBN0YVUSXu3aqy2:ZjFb72aqR
TLSH
T1CCB618157B9A95ADC46AC074874A4AB26E3270DB0F39B9FF48C542383E79EF41E38744
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7007180

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

spinning_cube.pdb

kernel32

Sleep GetModuleHandleA FormatMessageW HeapFree HeapAlloc GetProcessHeap LoadLibraryExA QueryPerformanceCounter QueryPerformanceFrequency CreateEventA WaitForSingleObject AddVectoredExceptionHandler LoadLibraryA RemoveVectoredExceptionHandler SetWaitableTimer CreateWaitableTimerExW InitializeSListHead SetUnhandledExceptionFilter GetCurrentThreadId SetThreadErrorMode FreeLibrary GetModuleHandleExW LoadLibraryExW GetProcAddress GetLastError SetConsoleTextAttribute GetConsoleScreenBufferInfo SetConsoleMode GetConsoleMode CloseHandle CreateMutexA WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW MultiByteToWideChar GetConsoleOutputCP GetFileType SetThreadStackGuarantee GetCurrentThread SwitchToThread GetSystemInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetCurrentProcess GetSystemTimeAsFileTime GetFileInformationByHandleEx GetStdHandle GetCurrentProcessId GetSystemTimePreciseAsFileTime HeapReAlloc lstrlenW ReleaseMutex GetModuleHandleW

user32

GetAsyncKeyState GetKeyboardState ToUnicodeEx GetKeyState MapVirtualKeyExW DispatchMessageW CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent PostMessageW TranslateMessage RedrawWindow GetClientRect GetKeyboardLayout GetWindowLongPtrW DestroyWindow LoadCursorW SetCursor RegisterTouchWindow SendInput GetRawInputData GetActiveWindow SystemParametersInfoA MsgWaitForMultipleObjectsEx RegisterWindowMessageA MapVirtualKeyW ReleaseCapture SetCapture RegisterRawInputDevices RegisterClassExW CreateWindowExW SetWindowLongPtrW DefWindowProcW GetCursorPos GetMonitorInfoW ChangeDisplaySettingsExW GetWindowPlacement SetWindowPlacement SetWindowPos InvalidateRgn MonitorFromWindow DestroyIcon DestroyCursor DisplayConfigGetDeviceInfo QueryDisplayConfig GetDisplayConfigBufferSizes MonitorFromRect ScreenToClient ValidateRect GetDC SetWindowTextW SetForegroundWindow SetWindowDisplayAffinity AdjustWindowRectEx GetMenu GetWindowLongW EnableMenuItem GetSystemMenu SetWindowLongW SendMessageW ShowWindow GetSystemMetrics ClipCursor GetClipCursor ShowCursor GetWindowRect ClientToScreen IsProcessDPIAware PeekMessageW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

gdi32

GetDeviceCaps DeleteObject CreateRectRgn

dxgi

CreateDXGIFactory1

setupapi

SetupDiEnumDeviceInfo SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW

oleaut32

SysFreeString SetErrorInfo GetErrorInfo SysStringLen

bcryptprimitives

ProcessPrng

ole32

RegisterDragDrop CoInitializeEx RevokeDragDrop OleInitialize CoCreateInstance CoUninitialize

uxtheme

SetWindowTheme

imm32

ImmAssociateContextEx ImmGetContext ImmGetCompositionStringW ImmReleaseContext

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow

shell32

DragFinish DragQueryFileW

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

__current_exception memcpy _CxxThrowException __current_exception_context memcmp __C_specific_handler memset __CxxFrameHandler3 memmove

api-ms-win-crt-math-l1-1-0

logf log asinf asin tanf powf ceilf log2f pow sin cosf log1pf floor ceil log1p tanhf sinf round trunc tan tanh coshf cosh floorf fmaf fma acosf acos __setusermatherr sinhf sinh expf fmod fmodf _hypot atan atanf log2 exp2 exp2f cos truncf atan2 atan2f exp

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type _configure_narrow_argv _initialize_onexit_table _register_thread_local_exe_atexit_callback _initialize_narrow_environment _register_onexit_function _get_initial_narrow_environment terminate _initterm _initterm_e exit _exit _c_exit __p___argc __p___argv _cexit _crt_atexit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-11_57060733d541bc2b1b23b8ebb94b554b_akira_cobalt-strike_rusty-stealer_satacom

kernel32

user32

api-ms-win-core-synch-l1-2-0

gdi32

dxgi

setupapi

oleaut32

bcryptprimitives

ole32

uxtheme

imm32

dwmapi

shell32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic