General
- Target 2026-08-07_862dd4f988ac8eb342f3bd8183999330_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- Sample260807-1pre8athjh
- SHA256 1f3ea63a6ca7ceb4d2067fd8951e585da6242e18ed1a4751410d975a60a4a27f
- MD5 862dd4f988ac8eb342f3bd8183999330
- SHA1 91da1ec41086205f97cff13af5cbe22a3ef45fdb
- SHA512 c8b5692df2c926f9391290b4dfa975b52bbbc3e8a4de6a514fb9cf1b544b8533b7a5472e896274e45d3f9fd3740670423f181a639a9bfac0ddaf3a1cfd1528f6
- SSDEEP 49152:hZnheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCr3KsZXIU6isx:hZnZiFFQN7BiB86N+sx
- TLSH T149956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_862dd4f988ac8eb342f3bd8183999330_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_862dd4f988ac8eb342f3bd8183999330_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_862dd4f988ac8eb342f3bd8183999330_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- SHA256 1f3ea63a6ca7ceb4d2067fd8951e585da6242e18ed1a4751410d975a60a4a27f
- MD5 862dd4f988ac8eb342f3bd8183999330
- SHA1 91da1ec41086205f97cff13af5cbe22a3ef45fdb
- SHA512 c8b5692df2c926f9391290b4dfa975b52bbbc3e8a4de6a514fb9cf1b544b8533b7a5472e896274e45d3f9fd3740670423f181a639a9bfac0ddaf3a1cfd1528f6
- SSDEEP 49152:hZnheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCr3KsZXIU6isx:hZnZiFFQN7BiB86N+sx
- TLSH T149956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.