General
- Target 2026-08-02_561838300a658e07544c1aff196b2d75_akira_glassworm_rusty-stealer
- Size 75.0MB
- Sample260802-dne98sssey
- SHA256 4aa15b68cbbcf5f6f063d3d01fad926968694147eca2ac850b11a6e206c70772
- MD5 561838300a658e07544c1aff196b2d75
- SHA1 5f644774b4d30ad29a91555ea89d1f51e6cc9971
- SHA512 823749ea24dd5f868e7c71993078f37950272252ad60392264d99f974a7d9907ec3821aefe2f9357da36822aa6afa624be4da90f69e8b602ffa2d0c8873ff665
- SSDEEP 1572864:+oSzE9DyrDUgRmAUQcGp80t1gSgnkrGSYqrMgrNwxAWPe4t/ElenSzw:+xzE9Df/QL7t1BFZXANzsw
- TLSH T104083343FAB690EDC16AC079860A5223FB72B84D07217AEB56D486353F12FE11EBD354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_561838300a658e07544c1aff196b2d75_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_561838300a658e07544c1aff196b2d75_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_561838300a658e07544c1aff196b2d75_akira_glassworm_rusty-stealer
- Size 75.0MB
- SHA256 4aa15b68cbbcf5f6f063d3d01fad926968694147eca2ac850b11a6e206c70772
- MD5 561838300a658e07544c1aff196b2d75
- SHA1 5f644774b4d30ad29a91555ea89d1f51e6cc9971
- SHA512 823749ea24dd5f868e7c71993078f37950272252ad60392264d99f974a7d9907ec3821aefe2f9357da36822aa6afa624be4da90f69e8b602ffa2d0c8873ff665
- SSDEEP 1572864:+oSzE9DyrDUgRmAUQcGp80t1gSgnkrGSYqrMgrNwxAWPe4t/ElenSzw:+xzE9Df/QL7t1BFZXANzsw
- TLSH T104083343FAB690EDC16AC079860A5223FB72B84D07217AEB56D486353F12FE11EBD354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Executes a VBScript file via the Windows Script Host.