General
- Target 2026-07-27_a5f8f8ca1dcbe4f0805201a33f939464_akira_glassworm_rusty-stealer
- Size 75.0MB
- Sample260727-2qvppsfk7t
- SHA256 a8051a103684c6ea73dc72eeee180884ea62d81ec7e48d936670dbdb1244baf8
- MD5 a5f8f8ca1dcbe4f0805201a33f939464
- SHA1 624cbabbfe32e968583f390dd01b7663e9d497a3
- SHA512 ff10da06bff79b5a7839ff924d49e3a4ebba86c6cc24955d73941b061f4b1b3fe83654e17345d461ad20390d25a13cfa5e53ac3ed914d630b6d65b1fff9a039f
- SSDEEP 1572864:NPo0B7COSaD4qh0xXjQ7Dl41gKnEmWPlSpPzdWy8eeBf4:xVB7CJasqheXIG1gyEVlecoqf4
- TLSH T1C6083343FAA691EDC16AC079861A5223FB72B84D07217AEB56D08A353F13BE01F7D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_a5f8f8ca1dcbe4f0805201a33f939464_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_a5f8f8ca1dcbe4f0805201a33f939464_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_a5f8f8ca1dcbe4f0805201a33f939464_akira_glassworm_rusty-stealer
- Size 75.0MB
- SHA256 a8051a103684c6ea73dc72eeee180884ea62d81ec7e48d936670dbdb1244baf8
- MD5 a5f8f8ca1dcbe4f0805201a33f939464
- SHA1 624cbabbfe32e968583f390dd01b7663e9d497a3
- SHA512 ff10da06bff79b5a7839ff924d49e3a4ebba86c6cc24955d73941b061f4b1b3fe83654e17345d461ad20390d25a13cfa5e53ac3ed914d630b6d65b1fff9a039f
- SSDEEP 1572864:NPo0B7COSaD4qh0xXjQ7Dl41gKnEmWPlSpPzdWy8eeBf4:xVB7CJasqheXIG1gyEVlecoqf4
- TLSH T1C6083343FAA691EDC16AC079861A5223FB72B84D07217AEB56D08A353F13BE01F7D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Executes a VBScript file via the Windows Script Host.