General
- Target 2026-08-07_66b24ac89fecd6d1fc23a99def884acc_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- Sample260808-bmm8cafk4z
- SHA256 87598cefce35e2caa71aa49c01819f98bfdf578c974c0689cabde0d676c6b07b
- MD5 66b24ac89fecd6d1fc23a99def884acc
- SHA1 8cc345a21b0cfdfecfc08aec064749a223d1d946
- SHA512 ddc05f3f2370bc01844ef994de7fd432c7bc5f4d3213ae9f71d164fa8143b7d7b886a3fea9a81cfb022bcbf27927ccfdcc61c60f73911eff98443ce0023e2ddd
- SSDEEP 49152:GnhheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCz3KUZXIU6is9:GnhZiFFQN7BiB06V+s9
- TLSH T1E3956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_66b24ac89fecd6d1fc23a99def884acc_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_66b24ac89fecd6d1fc23a99def884acc_akira_cobalt-strike_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_66b24ac89fecd6d1fc23a99def884acc_akira_cobalt-strike_glassworm_quasar-rat
- Size 1.9MB
- SHA256 87598cefce35e2caa71aa49c01819f98bfdf578c974c0689cabde0d676c6b07b
- MD5 66b24ac89fecd6d1fc23a99def884acc
- SHA1 8cc345a21b0cfdfecfc08aec064749a223d1d946
- SHA512 ddc05f3f2370bc01844ef994de7fd432c7bc5f4d3213ae9f71d164fa8143b7d7b886a3fea9a81cfb022bcbf27927ccfdcc61c60f73911eff98443ce0023e2ddd
- SSDEEP 49152:GnhheiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCz3KUZXIU6is9:GnhZiFFQN7BiB06V+s9
- TLSH T1E3956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.