General
- Target 2026-08-04_dce8cc83276a7386c57efcebed292d46_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- Sample260804-wgdryatyat
- SHA256 b0fe5fda033c95edd89fe175d4d7ddea0614a5e3cb236e3063a938b937cee463
- MD5 dce8cc83276a7386c57efcebed292d46
- SHA1 90159ef83e51feb6a4e2a996a6f9a4e9eb114864
- SHA512 4e14c4a05cadee84d76fe732eff8b993dcc40e324b991ea3f015d52e95e3dbc272bbb1527dd5cb16c373d0455f3435e6cbfd5d37f9a299c4182a7e91d7c43a55
- SSDEEP 49152:bZnheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCr3KwZXIU6isx:bZnZiFFQN7BiB865+sx
- TLSH T10A956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_dce8cc83276a7386c57efcebed292d46_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_dce8cc83276a7386c57efcebed292d46_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_dce8cc83276a7386c57efcebed292d46_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- SHA256 b0fe5fda033c95edd89fe175d4d7ddea0614a5e3cb236e3063a938b937cee463
- MD5 dce8cc83276a7386c57efcebed292d46
- SHA1 90159ef83e51feb6a4e2a996a6f9a4e9eb114864
- SHA512 4e14c4a05cadee84d76fe732eff8b993dcc40e324b991ea3f015d52e95e3dbc272bbb1527dd5cb16c373d0455f3435e6cbfd5d37f9a299c4182a7e91d7c43a55
- SSDEEP 49152:bZnheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCr3KwZXIU6isx:bZnZiFFQN7BiB865+sx
- TLSH T10A956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.