General
- Target 2026-05-28_d03e0d26379efe9f2f435c08e62637fa_akira_glassworm_icedid_megazord_quasar-rat_rusty-stealer_ryuk
- Size 1.8MB
- Sample260528-bak78act7p
- SHA256 07ee3127344b4c6cc78cb649a48d1bf6c66d87965fe74b9c70362aaa483dbf15
- MD5 d03e0d26379efe9f2f435c08e62637fa
- SHA1 ad7a0fe0c0cf718018bbb8df31653bb339e23b2e
- SHA512 ff30e27114ad436722d0f64a5cae8a09f29c457121fa9eff9af169dd44e1f7dbed0ed30e9fbb0f928779c92791fb15c1b74374b3c52c656540b0dcaf71d23862
- SSDEEP 49152:OfTGsESpclZT2Yg8UbzIqMWtzRnNmMgIU6iY:Ofpoybz/fJ5+Y
- TLSH T1E3957E03F6A580E8C19DC078C7579A33BA36B88D063576EF2BD45A512E2AFD06F2C715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_d03e0d26379efe9f2f435c08e62637fa_akira_glassworm_icedid_megazord_quasar-rat_rusty-stealer_ryuk.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_d03e0d26379efe9f2f435c08e62637fa_akira_glassworm_icedid_megazord_quasar-rat_rusty-stealer_ryuk.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_d03e0d26379efe9f2f435c08e62637fa_akira_glassworm_icedid_megazord_quasar-rat_rusty-stealer_ryuk
- Size 1.8MB
- SHA256 07ee3127344b4c6cc78cb649a48d1bf6c66d87965fe74b9c70362aaa483dbf15
- MD5 d03e0d26379efe9f2f435c08e62637fa
- SHA1 ad7a0fe0c0cf718018bbb8df31653bb339e23b2e
- SHA512 ff30e27114ad436722d0f64a5cae8a09f29c457121fa9eff9af169dd44e1f7dbed0ed30e9fbb0f928779c92791fb15c1b74374b3c52c656540b0dcaf71d23862
- SSDEEP 49152:OfTGsESpclZT2Yg8UbzIqMWtzRnNmMgIU6iY:Ofpoybz/fJ5+Y
- TLSH T1E3957E03F6A580E8C19DC078C7579A33BA36B88D063576EF2BD45A512E2AFD06F2C715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Deletes itself
Executes dropped EXE
Loads dropped DLL