General
- Target 2026-08-05_05607184601a79608604eac7e7e86560_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer
- Size 4.1MB
- Sample260805-1pcl3axcnf
- SHA256 1d161dbcdabd6cf98a6fbc57d8918329885f83dd467c260a0a1b8c4cc957a481
- MD5 05607184601a79608604eac7e7e86560
- SHA1 4a482852941acce25550e58704eda8c5037fd77c
- SHA512 a78969ae5f8b98d9b62d7ab15baf7fb4a1cb8a8990ebd11f299fba21d1b4774385da8876ad22a6b09d7ec0505d8b81b2a1883d9bc699d704be6d9372422707d3
- SSDEEP 49152:iARzBfuZrPjOKXKpNrEFKphv7hX5FvIYLQeoTTHY6NuhmdYekLNiXicJFFRGNzj3:D4ZrPau0r7552IUuhmdG7wRGpj3
- TLSH T141165A42E72911D9C026C174836A6327B761F99E073036EB4ED04B32AEADFE05F78B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_05607184601a79608604eac7e7e86560_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_05607184601a79608604eac7e7e86560_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_05607184601a79608604eac7e7e86560_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer
- Size 4.1MB
- SHA256 1d161dbcdabd6cf98a6fbc57d8918329885f83dd467c260a0a1b8c4cc957a481
- MD5 05607184601a79608604eac7e7e86560
- SHA1 4a482852941acce25550e58704eda8c5037fd77c
- SHA512 a78969ae5f8b98d9b62d7ab15baf7fb4a1cb8a8990ebd11f299fba21d1b4774385da8876ad22a6b09d7ec0505d8b81b2a1883d9bc699d704be6d9372422707d3
- SSDEEP 49152:iARzBfuZrPjOKXKpNrEFKphv7hX5FvIYLQeoTTHY6NuhmdYekLNiXicJFFRGNzj3:D4ZrPau0r7552IUuhmdG7wRGpj3
- TLSH T141165A42E72911D9C026C174836A6327B761F99E073036EB4ED04B32AEADFE05F78B55
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1