General
- Target 2026-06-26_4a19dc0dc6a4a210b6934e9f64387272_akira_cobalt-strike_glassworm_rusty-stealer
- Size 4.2MB
- Sample260629-ts67hsbs4m
- SHA256 7d7c27bbb3c561f415917cf07fbc5d9b0052ff84cce25988e850ecc4de6f198e
- MD5 4a19dc0dc6a4a210b6934e9f64387272
- SHA1 061d5b17f2b3e6395c35bf492e9202fc206a5651
- SHA512 66c3bea580ab31b57dc9f06f43bd23f977c96dc3053ac15dbe72cb220f2afbe290083c791c85377cdf4cfe23e921a1214105b5615a0b768026dd0841b6789e34
- SSDEEP 49152:fymYwWuCoHEt/iWpHbqhfm/5ijsfPhkOb5FONPkOL1GuhmNUiQ/lFTjN4:9uTN2hdw9bQUuhmNQLm
- TLSH T18C264B12E72251E9C825C17483265323B7E2F9AD433077E74E904733AE64ED05EBAB9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_4a19dc0dc6a4a210b6934e9f64387272_akira_cobalt-strike_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_4a19dc0dc6a4a210b6934e9f64387272_akira_cobalt-strike_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_4a19dc0dc6a4a210b6934e9f64387272_akira_cobalt-strike_glassworm_rusty-stealer
- Size 4.2MB
- SHA256 7d7c27bbb3c561f415917cf07fbc5d9b0052ff84cce25988e850ecc4de6f198e
- MD5 4a19dc0dc6a4a210b6934e9f64387272
- SHA1 061d5b17f2b3e6395c35bf492e9202fc206a5651
- SHA512 66c3bea580ab31b57dc9f06f43bd23f977c96dc3053ac15dbe72cb220f2afbe290083c791c85377cdf4cfe23e921a1214105b5615a0b768026dd0841b6789e34
- SSDEEP 49152:fymYwWuCoHEt/iWpHbqhfm/5ijsfPhkOb5FONPkOL1GuhmNUiQ/lFTjN4:9uTN2hdw9bQUuhmNQLm
- TLSH T18C264B12E72251E9C825C17483265323B7E2F9AD433077E74E904733AE64ED05EBAB9D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1