General
- Target 2026-07-27_e4f0b8188147c6339383ecc5ccff7cbb_akira_glassworm_rusty-stealer
- Size 75.0MB
- Sample260727-1j445add59
- SHA256 1358f10c8edf60ec218c28c2ae42486e88895f98a706fb5e2c3ccaac398e8743
- MD5 e4f0b8188147c6339383ecc5ccff7cbb
- SHA1 f2a650f9c8a4083ec0f5e38fbfdba0f489958490
- SHA512 b59d6f91bbd842396c6f2b4c199310ae6ab2112d454e9dcb28b5d3ea601e6f434cacead74bfc9aa495ed8f07db68ee392b313dbcecf7c94c33a0736393a1852e
- SSDEEP 1572864:/UgItTtwVm/N1606EtwDJ3a4BZqIFfWmpheECNYYv7/3CVYM25:8gCBwa16VbDRqIFOmnHCNYYv7/Yi
- TLSH T170083343F6A691EDC56AC17986165223FB72B84D07207BEB56908A313F53FE02E7D318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_e4f0b8188147c6339383ecc5ccff7cbb_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_e4f0b8188147c6339383ecc5ccff7cbb_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_e4f0b8188147c6339383ecc5ccff7cbb_akira_glassworm_rusty-stealer
- Size 75.0MB
- SHA256 1358f10c8edf60ec218c28c2ae42486e88895f98a706fb5e2c3ccaac398e8743
- MD5 e4f0b8188147c6339383ecc5ccff7cbb
- SHA1 f2a650f9c8a4083ec0f5e38fbfdba0f489958490
- SHA512 b59d6f91bbd842396c6f2b4c199310ae6ab2112d454e9dcb28b5d3ea601e6f434cacead74bfc9aa495ed8f07db68ee392b313dbcecf7c94c33a0736393a1852e
- SSDEEP 1572864:/UgItTtwVm/N1606EtwDJ3a4BZqIFfWmpheECNYYv7/3CVYM25:8gCBwa16VbDRqIFOmnHCNYYv7/Yi
- TLSH T170083343F6A691EDC56AC17986165223FB72B84D07207BEB56908A313F53FE02E7D318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Executes a VBScript file via the Windows Script Host.