General

  • Target
    2026-08-05_4b089b8c9fe6e0430c49e478dbd11b85_akira_glassworm_icedid_rusty-stealer
  • Size 4.4MB
  • Sample260805-dm4lfacf33
  • SHA256 bc66bc06f7a4b0fb44db78c58c2c3a6fecab608f3458e7417f75971211c6b91b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-05_4b089b8c9fe6e0430c49e478dbd11b85_akira_glassworm_icedid_rusty-stealer
    • Size 4.4MB
    • SHA256 bc66bc06f7a4b0fb44db78c58c2c3a6fecab608f3458e7417f75971211c6b91b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks