General
- Target 2026-05-28_3e997c4d48da98e5245531e0c2dee689_akira_cobalt-strike_glassworm_megazord_rusty-stealer
- Size 25.5MB
- Sample260528-cva4esdx5l
- SHA256 b8a6b0fbe9e3eb862ed2286a310faf663f24dc1429f732ea88fae8dc6c20997e
- MD5 3e997c4d48da98e5245531e0c2dee689
- SHA1 37f4af802ea955602e3d5258a7efce660351f06b
- SHA512 275f0c5e83a93e4832f974fa1bb7f11bfebd81fd7c7d26c33199b1e0422734c24ca22e89c050a460b3c9c48fb3bf9ce77b6749e6c28d79b5a306f8bf365d9dc2
- SSDEEP 393216:2rv5P2JxHkskIK3q5SIBWnAbmepT+ehS/:A5P2JxHkskIK3q5SS9bmayeh
- TLSH T18E471911BA5A596CD09EC4B083479B624A7134DB0B36F9FF4484593A2F7DFF82F28219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-28_3e997c4d48da98e5245531e0c2dee689_akira_cobalt-strike_glassworm_megazord_rusty-stealer.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_3e997c4d48da98e5245531e0c2dee689_akira_cobalt-strike_glassworm_megazord_rusty-stealer.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_3e997c4d48da98e5245531e0c2dee689_akira_cobalt-strike_glassworm_megazord_rusty-stealer
- Size 25.5MB
- SHA256 b8a6b0fbe9e3eb862ed2286a310faf663f24dc1429f732ea88fae8dc6c20997e
- MD5 3e997c4d48da98e5245531e0c2dee689
- SHA1 37f4af802ea955602e3d5258a7efce660351f06b
- SHA512 275f0c5e83a93e4832f974fa1bb7f11bfebd81fd7c7d26c33199b1e0422734c24ca22e89c050a460b3c9c48fb3bf9ce77b6749e6c28d79b5a306f8bf365d9dc2
- SSDEEP 393216:2rv5P2JxHkskIK3q5SIBWnAbmepT+ehS/:A5P2JxHkskIK3q5SS9bmayeh
- TLSH T18E471911BA5A596CD09EC4B083479B624A7134DB0B36F9FF4484593A2F7DFF82F28219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.