General
- Target 2026-08-04_f75bc21d4f082a61b51ae3902b0b4433_akira_glassworm_zxxz
- Size 24.5MB
- Sample260804-fgsyvs1gle
- SHA256 82c909d75b717a26548147228c0cf98b538a24a5075f49d2eb7678ad52fb0c43
- MD5 f75bc21d4f082a61b51ae3902b0b4433
- SHA1 51b870c8fff4bb473023198f36cda9f18d206801
- SHA512 62e98fd5382a62c0ea09fb724731c100a5f8843b3e3ea93c6a7dc4065fada39af59d3fecc36624202614dcf7ba45deab4b97feac8d298462cc45e9f18bcae7e5
- SSDEEP 98304:v8XkNwI9WAhxveTQcs+hsPVss9ivQ+Stuid/rdEAc30Btg/MM4QE4w4gYoAUo46i:kXkSSWpLsd/I07g/VUPg+JsMp
- TLSH T12247AF02E9E11979CA97F274859F5221B7343C068235EFA7353CE2741F22B52EB2E758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_f75bc21d4f082a61b51ae3902b0b4433_akira_glassworm_zxxz.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_f75bc21d4f082a61b51ae3902b0b4433_akira_glassworm_zxxz.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_f75bc21d4f082a61b51ae3902b0b4433_akira_glassworm_zxxz
- Size 24.5MB
- SHA256 82c909d75b717a26548147228c0cf98b538a24a5075f49d2eb7678ad52fb0c43
- MD5 f75bc21d4f082a61b51ae3902b0b4433
- SHA1 51b870c8fff4bb473023198f36cda9f18d206801
- SHA512 62e98fd5382a62c0ea09fb724731c100a5f8843b3e3ea93c6a7dc4065fada39af59d3fecc36624202614dcf7ba45deab4b97feac8d298462cc45e9f18bcae7e5
- SSDEEP 98304:v8XkNwI9WAhxveTQcs+hsPVss9ivQ+Stuid/rdEAc30Btg/MM4QE4w4gYoAUo46i:kXkSSWpLsd/I07g/VUPg+JsMp
- TLSH T12247AF02E9E11979CA97F274859F5221B7343C068235EFA7353CE2741F22B52EB2E758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.