General
- Target 2026-08-05_4b089b8c9fe6e0430c49e478dbd11b85_akira_glassworm_icedid_rusty-stealer
- Size 4.4MB
- Sample260805-dm4lfacf33
- SHA256 bc66bc06f7a4b0fb44db78c58c2c3a6fecab608f3458e7417f75971211c6b91b
- MD5 4b089b8c9fe6e0430c49e478dbd11b85
- SHA1 2c07821abb3fa1611fb107f72d5095bd331c6e47
- SHA512 821b0ff59191072dea7096d6d10f1e7b6401da179c5f98a8a320c40b74acd49b47c4e3d3e03ddcf6cb75accb95fb6643cc893f9567e38c490951dfcbe420fe8c
- SSDEEP 24576:mEK+nTpZmea3LCVbEHtH3zxGEwDjBOVlLif:Sa1VbEHtH3zx8jBOVlL
- TLSH T10326AF4BAAE0EEECD584417513424A44B62EBC5D2F79DF4E27AC003B78326F535C939A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-05_4b089b8c9fe6e0430c49e478dbd11b85_akira_glassworm_icedid_rusty-stealer.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_4b089b8c9fe6e0430c49e478dbd11b85_akira_glassworm_icedid_rusty-stealer
- Size 4.4MB
- SHA256 bc66bc06f7a4b0fb44db78c58c2c3a6fecab608f3458e7417f75971211c6b91b
- MD5 4b089b8c9fe6e0430c49e478dbd11b85
- SHA1 2c07821abb3fa1611fb107f72d5095bd331c6e47
- SHA512 821b0ff59191072dea7096d6d10f1e7b6401da179c5f98a8a320c40b74acd49b47c4e3d3e03ddcf6cb75accb95fb6643cc893f9567e38c490951dfcbe420fe8c
- SSDEEP 24576:mEK+nTpZmea3LCVbEHtH3zxGEwDjBOVlLif:Sa1VbEHtH3zx8jBOVlL
- TLSH T10326AF4BAAE0EEECD584417513424A44B62EBC5D2F79DF4E27AC003B78326F535C939A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1