General
- Target 2026-07-20_3b40d9cf270fe85e84b0c49e0dd7ea82_akira_glassworm_rusty-stealer
- Size 75.0MB
- Sample260720-16t8fafx9p
- SHA256 59acd99a819ba27e2619cb9aa99c4a5fa871d0d729dff8425415150d2a6d0d91
- MD5 3b40d9cf270fe85e84b0c49e0dd7ea82
- SHA1 2614e2b1e728c8b0e0ef4564e8c6e0d0855ed3a6
- SHA512 75036cc9d539446744ba853b8788bdf5731e381f4caa432fac488243aef5ad4ad70eb01d8b56d9ee696a44263449bff55137fc984eafc1e4d8c44c6e6fffb9b8
- SSDEEP 1572864:SMRZXk3m7d1fv5ilpzuoeWpAkYgskx6eURFMA6qz:jZXk2BvMOWA26eURx6g
- TLSH T153083343F6A281E9C56AC179865A6223FB32B849072166FB56D08B313F53FE01FBD714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_3b40d9cf270fe85e84b0c49e0dd7ea82_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_3b40d9cf270fe85e84b0c49e0dd7ea82_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_3b40d9cf270fe85e84b0c49e0dd7ea82_akira_glassworm_rusty-stealer
- Size 75.0MB
- SHA256 59acd99a819ba27e2619cb9aa99c4a5fa871d0d729dff8425415150d2a6d0d91
- MD5 3b40d9cf270fe85e84b0c49e0dd7ea82
- SHA1 2614e2b1e728c8b0e0ef4564e8c6e0d0855ed3a6
- SHA512 75036cc9d539446744ba853b8788bdf5731e381f4caa432fac488243aef5ad4ad70eb01d8b56d9ee696a44263449bff55137fc984eafc1e4d8c44c6e6fffb9b8
- SSDEEP 1572864:SMRZXk3m7d1fv5ilpzuoeWpAkYgskx6eURFMA6qz:jZXk2BvMOWA26eURx6g
- TLSH T153083343F6A281E9C56AC179865A6223FB32B849072166FB56D08B313F53FE01FBD714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Executes a VBScript file via the Windows Script Host.