General
- Target 2026-07-07_ab7162a939cad8fcde369b64f26f29e3_akira_glassworm_rusty-stealer
- Size 17.5MB
- Sample260708-a8q1pagy41
- SHA256 9163ab7d28786aa58457e522dd5963fd9cf4456c5fe69bdcd23e4db7a6b1a978
- MD5 ab7162a939cad8fcde369b64f26f29e3
- SHA1 4cf3156f0699a292b2ad7cbfe773e5732cf041f7
- SHA512 a708591645178b13cabb724efda181a9bb48d77f0395ef9de7dbc4d07b567572916890daf110e556485f360937da2cbfe519e3d76ac8133367ac5fc950898ef8
- SSDEEP 196608:f0X7C3lieYbrax6v3HPGdMzhpz9Qw/Zso+Ks:LYHa0v3+dQpz9Ql
- TLSH T159074A027F8A59A9C09DC874C24B8BA34F2230CB1A3AF6BF45D546252F7E6B51F1D358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-07_ab7162a939cad8fcde369b64f26f29e3_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_ab7162a939cad8fcde369b64f26f29e3_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_ab7162a939cad8fcde369b64f26f29e3_akira_glassworm_rusty-stealer
- Size 17.5MB
- SHA256 9163ab7d28786aa58457e522dd5963fd9cf4456c5fe69bdcd23e4db7a6b1a978
- MD5 ab7162a939cad8fcde369b64f26f29e3
- SHA1 4cf3156f0699a292b2ad7cbfe773e5732cf041f7
- SHA512 a708591645178b13cabb724efda181a9bb48d77f0395ef9de7dbc4d07b567572916890daf110e556485f360937da2cbfe519e3d76ac8133367ac5fc950898ef8
- SSDEEP 196608:f0X7C3lieYbrax6v3HPGdMzhpz9Qw/Zso+Ks:LYHa0v3+dQpz9Ql
- TLSH T159074A027F8A59A9C09DC874C24B8BA34F2230CB1A3AF6BF45D546252F7E6B51F1D358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.