General
- Target 2026-05-11_2d4f90302415e3a87e1859ff3818393b_akira_cobalt-strike_glassworm_rusty-stealer
- Size 4.2MB
- Sample260511-b4d11acy8j
- SHA256 c3baab98d474f9d0ee578f8e4f2c68b8a9c159a6000f5c404d2ffeb4c899df3c
- MD5 2d4f90302415e3a87e1859ff3818393b
- SHA1 2df4368cbdbc4e6ef3d1b99ddccc6db226ba36b8
- SHA512 27272793f301940de307f76029768829b18629edea2c33e3db2782ea2157edc826ac7689917a2af09ce4ad5e141b44bb0b750588ce78d91470b3bc8172bfb679
- SSDEEP 49152:p64Ujs8amuxKl7wXEsDhpyfRBzOAtmi2ZKuhm6EQ/lFTjN4:jUjtwSfRmEuhm8Lm
- TLSH T139264B12E72151D9C069CA708327E323B771F99D27307AEB5EA44B31ADE4EE01E78B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_2d4f90302415e3a87e1859ff3818393b_akira_cobalt-strike_glassworm_rusty-stealer.exe
Resource
win10v2004-20260130-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_2d4f90302415e3a87e1859ff3818393b_akira_cobalt-strike_glassworm_rusty-stealer.exe
Resource
win11-20260130-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_2d4f90302415e3a87e1859ff3818393b_akira_cobalt-strike_glassworm_rusty-stealer
- Size 4.2MB
- SHA256 c3baab98d474f9d0ee578f8e4f2c68b8a9c159a6000f5c404d2ffeb4c899df3c
- MD5 2d4f90302415e3a87e1859ff3818393b
- SHA1 2df4368cbdbc4e6ef3d1b99ddccc6db226ba36b8
- SHA512 27272793f301940de307f76029768829b18629edea2c33e3db2782ea2157edc826ac7689917a2af09ce4ad5e141b44bb0b750588ce78d91470b3bc8172bfb679
- SSDEEP 49152:p64Ujs8amuxKl7wXEsDhpyfRBzOAtmi2ZKuhm6EQ/lFTjN4:jUjtwSfRmEuhm8Lm
- TLSH T139264B12E72151D9C069CA708327E323B771F99D27307AEB5EA44B31ADE4EE01E78B15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1