General
- Target 2026-08-07_c2b549b7888fa94bd0524e86eaeca33b_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- Sample260807-ss86fa1tez
- SHA256 d6d3f6b41f2ddccf900c5482e271acb6c04f0e06ac2d7bddab1d2ec2328d3db8
- MD5 c2b549b7888fa94bd0524e86eaeca33b
- SHA1 9f96830ba8ddbb699210e1aa61943e5c5ac16ab7
- SHA512 8404d9f0dfe6365ffa85118eb9382a2860243bb68e3bf6f57c5f43bb8220187a746fabcae4b9b1d3b5e221361e7d20d24a0fb610aaab3520330ec2b2ab5c0577
- SSDEEP 49152:R4nheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCr3KuZXIU6isx:R4nZiFFQN7BiB86D+sx
- TLSH T1B3956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_c2b549b7888fa94bd0524e86eaeca33b_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_c2b549b7888fa94bd0524e86eaeca33b_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_c2b549b7888fa94bd0524e86eaeca33b_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- SHA256 d6d3f6b41f2ddccf900c5482e271acb6c04f0e06ac2d7bddab1d2ec2328d3db8
- MD5 c2b549b7888fa94bd0524e86eaeca33b
- SHA1 9f96830ba8ddbb699210e1aa61943e5c5ac16ab7
- SHA512 8404d9f0dfe6365ffa85118eb9382a2860243bb68e3bf6f57c5f43bb8220187a746fabcae4b9b1d3b5e221361e7d20d24a0fb610aaab3520330ec2b2ab5c0577
- SSDEEP 49152:R4nheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCr3KuZXIU6isx:R4nZiFFQN7BiB86D+sx
- TLSH T1B3956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.