General
- Target 2026-07-04_ec53c9996dc69cbb91180b57b99b9e99_akira_cobalt-strike_glassworm_quasar-rat
- Size 14.7MB
- Sample260704-y55axahs2p
- SHA256 3d9353720be1349b73123b6953827ba45711ecce0e7a3f89e4ef90e16937d2da
- MD5 ec53c9996dc69cbb91180b57b99b9e99
- SHA1 1ddf3ddc6fa8c14ed8a84a7d5cf78505d3f04039
- SHA512 27c8634acc0faba2b0ad4855d998f0288b2d0cc8dabf68aa4b39a457a89ce10c90f489be71a7bc23018d87d600734a93186fa624ebd240c658633741b4354d27
- SSDEEP 98304:LiMGYRfzHu0gBXLINaY8G8sveaRSvvEtMl3whULicVS:eMjjdIAaY8G8EMLl3wvx
- TLSH T143F69E03A3C65AB8C5A2D131928DA3B1FB72B8A95372F72A741DD7383C179604F2F159
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_ec53c9996dc69cbb91180b57b99b9e99_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_ec53c9996dc69cbb91180b57b99b9e99_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_ec53c9996dc69cbb91180b57b99b9e99_akira_cobalt-strike_glassworm_quasar-rat
- Size 14.7MB
- SHA256 3d9353720be1349b73123b6953827ba45711ecce0e7a3f89e4ef90e16937d2da
- MD5 ec53c9996dc69cbb91180b57b99b9e99
- SHA1 1ddf3ddc6fa8c14ed8a84a7d5cf78505d3f04039
- SHA512 27c8634acc0faba2b0ad4855d998f0288b2d0cc8dabf68aa4b39a457a89ce10c90f489be71a7bc23018d87d600734a93186fa624ebd240c658633741b4354d27
- SSDEEP 98304:LiMGYRfzHu0gBXLINaY8G8sveaRSvvEtMl3whULicVS:eMjjdIAaY8G8EMLl3wvx
- TLSH T143F69E03A3C65AB8C5A2D131928DA3B1FB72B8A95372F72A741DD7383C179604F2F159
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.