General
- Target 2026-08-02_7cd90213babbb348c9107a160b8de78e_akira_glassworm_icedid_luca-stealer_rusty-stealer
- Size 11.8MB
- Sample260803-af9bkavapd
- SHA256 6b0cfbaa452cf763c4d6fe4f3e2ed95ee41c05f83d707e1a4ee89112718f254e
- MD5 7cd90213babbb348c9107a160b8de78e
- SHA1 52e051e121b0e3c237210f93657ce4da67c5d8d4
- SHA512 9f414ccef2c09c9108e6333e60b82ab4552f17c839909ca96fda4156df7c3904310e1f6bdfa4447afc4daa18bd684d3fd360faaa065c4fb692d850750dd306dd
- SSDEEP 98304:iTNt/V7SWLiOoeFAxnIEbV7fTByjdyeKPMHWhdY:2A+QVp3PMH
- TLSH T139C63A16FBAA54ECD55AC47483564A23AA3134CA0B35BAFF45C486343F6ABF05E3C718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_7cd90213babbb348c9107a160b8de78e_akira_glassworm_icedid_luca-stealer_rusty-stealer.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_7cd90213babbb348c9107a160b8de78e_akira_glassworm_icedid_luca-stealer_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_7cd90213babbb348c9107a160b8de78e_akira_glassworm_icedid_luca-stealer_rusty-stealer
- Size 11.8MB
- SHA256 6b0cfbaa452cf763c4d6fe4f3e2ed95ee41c05f83d707e1a4ee89112718f254e
- MD5 7cd90213babbb348c9107a160b8de78e
- SHA1 52e051e121b0e3c237210f93657ce4da67c5d8d4
- SHA512 9f414ccef2c09c9108e6333e60b82ab4552f17c839909ca96fda4156df7c3904310e1f6bdfa4447afc4daa18bd684d3fd360faaa065c4fb692d850750dd306dd
- SSDEEP 98304:iTNt/V7SWLiOoeFAxnIEbV7fTByjdyeKPMHWhdY:2A+QVp3PMH
- TLSH T139C63A16FBAA54ECD55AC47483564A23AA3134CA0B35BAFF45C486343F6ABF05E3C718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects CybrexAgent
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.