General
- Target 2026-05-17_526dc06454fc58b178ff6fa41cb0d511_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-stealer_ryuk_stealc_voidlink
- Size 112.0MB
- Sample260517-pmp9lab13p
- SHA256 dd9015ff05b727d2a22587bd5662a38e01eb277d527ebcac252ea1515196bf56
- MD5 526dc06454fc58b178ff6fa41cb0d511
- SHA1 0ee8ce3975d2ae02eec4ec925df1e79723e537d9
- SHA512 647eac6d7915f907c9611287b6b29b5e787ce0cdc02904d164c35cb2688f65a9d43e0e720ab4830d41fdbbc6dac62bb0b6814be1e8bddd1fc4450bb9ad90a9f8
- SSDEEP 1572864:eAXffHRdXmZF8CY8EpRIf2pjmom3H7S7u+VYVXqwb:T3iXtqwb
- TLSH T196486C43B2A75098E4BBC97582D65323E5337C8A1F3069EF15845B312F73AE09B39B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-17_526dc06454fc58b178ff6fa41cb0d511_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_526dc06454fc58b178ff6fa41cb0d511_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_526dc06454fc58b178ff6fa41cb0d511_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-stealer_ryuk_stealc_voidlink
- Size 112.0MB
- SHA256 dd9015ff05b727d2a22587bd5662a38e01eb277d527ebcac252ea1515196bf56
- MD5 526dc06454fc58b178ff6fa41cb0d511
- SHA1 0ee8ce3975d2ae02eec4ec925df1e79723e537d9
- SHA512 647eac6d7915f907c9611287b6b29b5e787ce0cdc02904d164c35cb2688f65a9d43e0e720ab4830d41fdbbc6dac62bb0b6814be1e8bddd1fc4450bb9ad90a9f8
- SSDEEP 1572864:eAXffHRdXmZF8CY8EpRIf2pjmom3H7S7u+VYVXqwb:T3iXtqwb
- TLSH T196486C43B2A75098E4BBC97582D65323E5337C8A1F3069EF15845B312F73AE09B39B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.