General
- Target 2026-05-22_1d65d01d5d60717f3dc091cdd545d22c_akira_glassworm_quasar-rat_remcos_rusty-stealer
- Size 33.5MB
- Sample260522-tm9epahs8l
- SHA256 d39797744fdcd6a828641c308df23c5376310365e4b144b03bd4dc9632cb9433
- MD5 1d65d01d5d60717f3dc091cdd545d22c
- SHA1 e90e1587ed1acca00ee8255b1d9bbf714fcce7ba
- SHA512 cb6e8ec2900c9e853b127c21968b9d2be6f50ca004d8204cc0583a42fb3cf9389102e536b0f87d7b90d50f8b239c479c6ab469bc2d10a48e0a107d03c40eaf5c
- SSDEEP 196608:QHER92b4ybop/dqPTufXeRRzRRHkXiRsvf+iPxFsC:7R9woldqLS6kywf+iPxFs
- TLSH T167771811BB8EAD9DD05AC47083468A725A3138DA1B35BAFF54D452353FBEAF42A3C314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-22_1d65d01d5d60717f3dc091cdd545d22c_akira_glassworm_quasar-rat_remcos_rusty-stealer.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_1d65d01d5d60717f3dc091cdd545d22c_akira_glassworm_quasar-rat_remcos_rusty-stealer.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_1d65d01d5d60717f3dc091cdd545d22c_akira_glassworm_quasar-rat_remcos_rusty-stealer
- Size 33.5MB
- SHA256 d39797744fdcd6a828641c308df23c5376310365e4b144b03bd4dc9632cb9433
- MD5 1d65d01d5d60717f3dc091cdd545d22c
- SHA1 e90e1587ed1acca00ee8255b1d9bbf714fcce7ba
- SHA512 cb6e8ec2900c9e853b127c21968b9d2be6f50ca004d8204cc0583a42fb3cf9389102e536b0f87d7b90d50f8b239c479c6ab469bc2d10a48e0a107d03c40eaf5c
- SSDEEP 196608:QHER92b4ybop/dqPTufXeRRzRRHkXiRsvf+iPxFsC:7R9woldqLS6kywf+iPxFs
- TLSH T167771811BB8EAD9DD05AC47083468A725A3138DA1B35BAFF54D452353FBEAF42A3C314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.