General
- Target 2026-08-07_f7ed6ec7f76f063c2bcfaeced7d2286b_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- Sample260807-1khbrawzdy
- SHA256 78d324d9ec9f69c82722447d679248803acaca8c67c12af53f7737e4ebf4b65c
- MD5 f7ed6ec7f76f063c2bcfaeced7d2286b
- SHA1 683ad47386187c0ced9b0639ac9d875e2d4202a7
- SHA512 3d8fa6eade4917276e2bead3e62061eb003e45644eaf2845d57adecb5564eba289ce1c6053cd69097a9b6727305b7b544c49f0023206559af0dac8d5e65b7d57
- SSDEEP 49152:LJhheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCz3KZZXIU6is9:LJhZiFFQN7BiB06k+s9
- TLSH T1F8956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_f7ed6ec7f76f063c2bcfaeced7d2286b_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_f7ed6ec7f76f063c2bcfaeced7d2286b_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_f7ed6ec7f76f063c2bcfaeced7d2286b_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- SHA256 78d324d9ec9f69c82722447d679248803acaca8c67c12af53f7737e4ebf4b65c
- MD5 f7ed6ec7f76f063c2bcfaeced7d2286b
- SHA1 683ad47386187c0ced9b0639ac9d875e2d4202a7
- SHA512 3d8fa6eade4917276e2bead3e62061eb003e45644eaf2845d57adecb5564eba289ce1c6053cd69097a9b6727305b7b544c49f0023206559af0dac8d5e65b7d57
- SSDEEP 49152:LJhheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCz3KZZXIU6is9:LJhZiFFQN7BiB06k+s9
- TLSH T1F8956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.