Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 11:28
Behavioral task
behavioral1
Sample
2026-08-03_6ce67af9f5ac4091ad69722f71e096a0_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_6ce67af9f5ac4091ad69722f71e096a0_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target 2026-08-03_6ce67af9f5ac4091ad69722f71e096a0_akira_glassworm_rusty-stealer.exe
- Size 15.8MB
- Sample260804-nk6m5aac87
- SHA256 a0e49f5d33d9a0e5896fef37c3d690afc1ce432b773bfe83e92955d2d999758b
- MD5 6ce67af9f5ac4091ad69722f71e096a0
- SHA1 f043da74e41f736a42e98b94c82afacb50d3899b
- SHA512 701351d4712860c97cdafce2b230623e915561df5a913036700de1cfd46655eef15cab682aec3161d58501f969370426143a973d0c2b31e909c82b2052497b93
- SSDEEP 98304:ivcVLnMVpj3v7a+cMnZd6s3pKieigHo3r1FmQhAJBB0PKr/PoamvYhzbAFbXGTtt:ivb3V3rxaYzaNfC3WQXqj1PGbUN1XT/
- TLSH T152F64943F6A2A0A8C069C074935A6233FB72BC8D4734B6EB6BD44B213F65F90663D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects Windows executables referencing non-Windows User-Agents 2 IoCs
resource yara_rule behavioral2/memory/5816-0-0x00007FF62E210000-0x00007FF62F1D5000-memory.dmp INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA behavioral2/memory/5816-1-0x00007FF62E210000-0x00007FF62F1D5000-memory.dmp INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA - Detects executables containing URLs to raw contents of a Github gist 2 IoCs
resource yara_rule behavioral2/memory/5816-0-0x00007FF62E210000-0x00007FF62F1D5000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL behavioral2/memory/5816-1-0x00007FF62E210000-0x00007FF62F1D5000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL - UPX dump on OEP (original entry point) 2 IoCs
resource yara_rule behavioral2/memory/5816-0-0x00007FF62E210000-0x00007FF62F1D5000-memory.dmp UPX behavioral2/memory/5816-1-0x00007FF62E210000-0x00007FF62F1D5000-memory.dmp UPX -
resource yara_rule behavioral2/memory/5816-0-0x00007FF62E210000-0x00007FF62F1D5000-memory.dmp upx behavioral2/memory/5816-1-0x00007FF62E210000-0x00007FF62F1D5000-memory.dmp upx