General
- Target 2026-08-03_b57afcfaa19432eb75b1bfd4e39e80d9_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- Sample260804-l5kv2shc93
- SHA256 e4d328ddeb985d45961046711130df47bf9b016011826a291bff4135cbaac584
- MD5 b57afcfaa19432eb75b1bfd4e39e80d9
- SHA1 e824f33ecbc804d5311bd6411512950e72b0fe0a
- SHA512 f64222d426952f32b01384a43b84c6f8faf6f89e3a06936a26667d85f1d48e049e655cd39c479ad8afecb3727095289d8606fd47697e59f09c00476e2643d4e8
- SSDEEP 49152:dOnheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCr3KtZXIU6isx:dOnZiFFQN7BiB86A+sx
- TLSH T119956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_b57afcfaa19432eb75b1bfd4e39e80d9_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_b57afcfaa19432eb75b1bfd4e39e80d9_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_b57afcfaa19432eb75b1bfd4e39e80d9_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- SHA256 e4d328ddeb985d45961046711130df47bf9b016011826a291bff4135cbaac584
- MD5 b57afcfaa19432eb75b1bfd4e39e80d9
- SHA1 e824f33ecbc804d5311bd6411512950e72b0fe0a
- SHA512 f64222d426952f32b01384a43b84c6f8faf6f89e3a06936a26667d85f1d48e049e655cd39c479ad8afecb3727095289d8606fd47697e59f09c00476e2643d4e8
- SSDEEP 49152:dOnheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCr3KtZXIU6isx:dOnZiFFQN7BiB86A+sx
- TLSH T119956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.