08fa5380f5802fcb5fa16de2fa2be15a09c79b6225396eb28d9a0db57388189d | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-08-05...er.exe

windows10-2004-x64

7

2026-08-05...er.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-05_df5c045b2fae9748f4a5a6d7472d483a_akira_glassworm_rusty-stealer
Size 4.5MB
Sample260805-c8jmqacd27
SHA256 08fa5380f5802fcb5fa16de2fa2be15a09c79b6225396eb28d9a0db57388189d
MD5 df5c045b2fae9748f4a5a6d7472d483a
SHA1 1a77c715a846693436e09ed7b83f070158fcb2cc
SHA512 4ff8ac74183c4835e1532647909f06bb0f12038747e02f9533f92d72b958bdc14baaea63ef89e179e6202c48554b3c19c8580279b886f6b72c25f0e2249bf017
SSDEEP 49152:yDLPkPUxeduC3rwnMacpph37zj4MU6Itp3K1RzSvqKx7LhV7bJurfW+LqYAYY1kS:mLiU2dNY6UbLhVXiLqYAN7
TLSH
T1D626AE17F39540E9C05AC178C71B9233A732B84B0528F2AF7B9C5B912F69F505B2EB64
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-05_df5c045b2fae9748f4a5a6d7472d483a_akira_glassworm_rusty-stealer.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

defense_evasion discovery execution persistence trojan

Behavioral task

behavioral2

Sample

2026-08-05_df5c045b2fae9748f4a5a6d7472d483a_akira_glassworm_rusty-stealer.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

13 signatures

150 seconds

defense_evasion discovery execution persistence trojan

Malware Config

Targets

- Target
  2026-08-05_df5c045b2fae9748f4a5a6d7472d483a_akira_glassworm_rusty-stealer
- Size 4.5MB
- SHA256 08fa5380f5802fcb5fa16de2fa2be15a09c79b6225396eb28d9a0db57388189d
- MD5 df5c045b2fae9748f4a5a6d7472d483a
- SHA1 1a77c715a846693436e09ed7b83f070158fcb2cc
- SHA512 4ff8ac74183c4835e1532647909f06bb0f12038747e02f9533f92d72b958bdc14baaea63ef89e179e6202c48554b3c19c8580279b886f6b72c25f0e2249bf017
- SSDEEP 49152:yDLPkPUxeduC3rwnMacpph37zj4MU6Itp3K1RzSvqKx7LhV7bJurfW+LqYAYY1kS:mLiU2dNY6UbLhVXiLqYAN7
- TLSH
  T1D626AE17F39540E9C05AC178C71B9233A732B84B0528F2AF7B9C5B912F69F505B2EB64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence trojan
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistencetrojan

behavioral2

defense_evasiondiscoveryexecutionpersistencetrojan

© 2018-2026

Terms | Privacy