General
- Target 2026-07-17_249c89fb9a1489b94558b53246d48e64_akira_glassworm_rusty-stealer
- Size 3.0MB
- Sample260717-3lsj8ac171
- SHA256 574a9d1ec6efd3e65db98b7c7ea9ea59d03d3d2b86ee5a32b22d985c9e366053
- MD5 249c89fb9a1489b94558b53246d48e64
- SHA1 19dce43677934ee4f5e53b5429b5033aec3fa9d1
- SHA512 0cfd90e111bb1b2b35cba6f042940e857f9ce62ecba4d34cb29f1fb463bee3da4d6a630fa5f36ac27f6a7a9ea172b4aace45e8fb627663cd64ad16ad630d3f09
- SSDEEP 49152:dWdMbPh4wN3juHfwmue3N4i8OgcPOnQ+PRTQB0t06m5fB:xlHqH4rIJ
- TLSH T1D2E529217F5A89EDC54AC034825686B2693270DF0F35BAFF448496783F6AAF51F3C258
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-17_249c89fb9a1489b94558b53246d48e64_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_249c89fb9a1489b94558b53246d48e64_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_249c89fb9a1489b94558b53246d48e64_akira_glassworm_rusty-stealer
- Size 3.0MB
- SHA256 574a9d1ec6efd3e65db98b7c7ea9ea59d03d3d2b86ee5a32b22d985c9e366053
- MD5 249c89fb9a1489b94558b53246d48e64
- SHA1 19dce43677934ee4f5e53b5429b5033aec3fa9d1
- SHA512 0cfd90e111bb1b2b35cba6f042940e857f9ce62ecba4d34cb29f1fb463bee3da4d6a630fa5f36ac27f6a7a9ea172b4aace45e8fb627663cd64ad16ad630d3f09
- SSDEEP 49152:dWdMbPh4wN3juHfwmue3N4i8OgcPOnQ+PRTQB0t06m5fB:xlHqH4rIJ
- TLSH T1D2E529217F5A89EDC54AC034825686B2693270DF0F35BAFF448496783F6AAF51F3C258
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.