General
- Target 2026-07-21_fd4b90d93c40fc1721d46331bc692a04_akira_glassworm_rusty-stealer
- Size 50.0MB
- Sample260721-ydn5lstbqa
- SHA256 129f9f8a6f9477f689b6c63dc9f75d5555881e178cb022bc830912987d86c395
- MD5 fd4b90d93c40fc1721d46331bc692a04
- SHA1 d62f13798cd754cf1e0bdac98e48012919e5d95e
- SHA512 b63c38534740847d632d7146c044f0af9c0258763d2f5032275d2937b62f611ac690442b6ef53d65db4f39c861ed4f90c8ef6ffcf48ebfd0a0b45670d86021bd
- SSDEEP 1572864:6gIvxTQ8c+0JHpdDG1gmOZceLVPprcTZo4Lpbqqr:svxTh0JpdSHac+PpcTTD
- TLSH T197B72343F6A681EDC56AC038861A5223FB72B84907207BEB56908B353F53FE05EBD754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_fd4b90d93c40fc1721d46331bc692a04_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_fd4b90d93c40fc1721d46331bc692a04_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_fd4b90d93c40fc1721d46331bc692a04_akira_glassworm_rusty-stealer
- Size 50.0MB
- SHA256 129f9f8a6f9477f689b6c63dc9f75d5555881e178cb022bc830912987d86c395
- MD5 fd4b90d93c40fc1721d46331bc692a04
- SHA1 d62f13798cd754cf1e0bdac98e48012919e5d95e
- SHA512 b63c38534740847d632d7146c044f0af9c0258763d2f5032275d2937b62f611ac690442b6ef53d65db4f39c861ed4f90c8ef6ffcf48ebfd0a0b45670d86021bd
- SSDEEP 1572864:6gIvxTQ8c+0JHpdDG1gmOZceLVPprcTZo4Lpbqqr:svxTh0JpdSHac+PpcTTD
- TLSH T197B72343F6A681EDC56AC038861A5223FB72B84907207BEB56908B353F53FE05EBD754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Executes a VBScript file via the Windows Script Host.