General
- Target 2026-07-26_486871c5157102bb44c2ff49fc5f7356_akira_glassworm_rusty-stealer
- Size 75.0MB
- Sample260726-1tf52sssds
- SHA256 94b59be614d6c6f9a11821fd3554e32dacfe02c2593e6342cf9db0a678b7672c
- MD5 486871c5157102bb44c2ff49fc5f7356
- SHA1 1df5f7a05e6aa5b04e18bd1f8fdf56b33b13efe0
- SHA512 73eee7c36c4775b503b3fcb95e817bccf419fe310ccd809f2e5ccda3806bc628f3b79b6c4e296c7c7de53c59e428aa6af0bd37b219363974c21cf7e55bcfb642
- SSDEEP 1572864:nnMubMfy3pnQo73qMMCvPqwOh/tuNJC8xIK2MNOthyyB:nPbM65QoPMCHqwO5tEGK2L7B
- TLSH T175083343F6A691EDC16AC079861A5633FB32B88D07307AEB56908A353F52FE01E7D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-26_486871c5157102bb44c2ff49fc5f7356_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-26_486871c5157102bb44c2ff49fc5f7356_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-26_486871c5157102bb44c2ff49fc5f7356_akira_glassworm_rusty-stealer
- Size 75.0MB
- SHA256 94b59be614d6c6f9a11821fd3554e32dacfe02c2593e6342cf9db0a678b7672c
- MD5 486871c5157102bb44c2ff49fc5f7356
- SHA1 1df5f7a05e6aa5b04e18bd1f8fdf56b33b13efe0
- SHA512 73eee7c36c4775b503b3fcb95e817bccf419fe310ccd809f2e5ccda3806bc628f3b79b6c4e296c7c7de53c59e428aa6af0bd37b219363974c21cf7e55bcfb642
- SSDEEP 1572864:nnMubMfy3pnQo73qMMCvPqwOh/tuNJC8xIK2MNOthyyB:nPbM65QoPMCHqwO5tEGK2L7B
- TLSH T175083343F6A691EDC16AC079861A5633FB32B88D07307AEB56908A353F52FE01E7D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Executes a VBScript file via the Windows Script Host.