General
- Target 2026-08-02_ba3c7e00223b6652066c6aaeafe42eb1_akira_glassworm_icedid_luca-stealer_rusty-stealer
- Size 11.9MB
- Sample260802-3sxgratfnd
- SHA256 39158d7688762a0f4deedc411092a812a70e1fad0f7c06f51ea3b9d3045f1590
- MD5 ba3c7e00223b6652066c6aaeafe42eb1
- SHA1 1792708eb9f91f31885c89f61a256009b792adce
- SHA512 b44c2f49573d135acc0ef7565f56987b0662388098715ad0934b032feb2d9dd55c6913c5c69109f1ea8ce42a3df802ae9af3c0c9fa32b97f561988462948418d
- SSDEEP 98304:EFVqup9CfWMp+9dvBF7wFfr9+kNAPX9Nu0T7poMF:eqA5B66Nu0
- TLSH T175C64B16FAAA54ECC45AC474C3564A23AA3174CA0B35BAFF45C485783F6ABF06E3C714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_ba3c7e00223b6652066c6aaeafe42eb1_akira_glassworm_icedid_luca-stealer_rusty-stealer.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_ba3c7e00223b6652066c6aaeafe42eb1_akira_glassworm_icedid_luca-stealer_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_ba3c7e00223b6652066c6aaeafe42eb1_akira_glassworm_icedid_luca-stealer_rusty-stealer
- Size 11.9MB
- SHA256 39158d7688762a0f4deedc411092a812a70e1fad0f7c06f51ea3b9d3045f1590
- MD5 ba3c7e00223b6652066c6aaeafe42eb1
- SHA1 1792708eb9f91f31885c89f61a256009b792adce
- SHA512 b44c2f49573d135acc0ef7565f56987b0662388098715ad0934b032feb2d9dd55c6913c5c69109f1ea8ce42a3df802ae9af3c0c9fa32b97f561988462948418d
- SSDEEP 98304:EFVqup9CfWMp+9dvBF7wFfr9+kNAPX9Nu0T7poMF:eqA5B66Nu0
- TLSH T175C64B16FAAA54ECC45AC474C3564A23AA3174CA0B35BAFF45C485783F6ABF06E3C714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects CybrexAgent
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.