475157277e1af39d9fd28b3c55670ab0a68be03e33fd5961ab191186e7df6ffa

General

Target
2026-08-08_4fa4a356d79f238d0533b541117c32ff_akira_glassworm
Size 901KB
Sample260808-d6f99aswe1
SHA256 475157277e1af39d9fd28b3c55670ab0a68be03e33fd5961ab191186e7df6ffa
MD5 4fa4a356d79f238d0533b541117c32ff
SHA1 c134364162f0514f9cbf3107d764b853832dad72
SHA512 3babf1aa45c07ba09d7b1ab3fd44ba3e3f35b5d98bb8a09acd860bf73f63d72c7cfe26b611f89e5f080f0232594ddd5b282d708bfc1bc28d4c6a8aa5c2891bba
SSDEEP 12288:zccC6LvF+TQgqt5BXki1IcSusaRA2l9LwEssqnmrsHhC9IqLYomFsuoPEn0:zc/6Lv4cNP1uusaRX9c1sWC3Yom+ub
TLSH
T178157C47BAD991BCD15AC078C35B9633BA73B88A02317DBF03E496302E69E512F1D719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion

Malware Config

Targets

- Target
  2026-08-08_4fa4a356d79f238d0533b541117c32ff_akira_glassworm
- Size 901KB
- SHA256 475157277e1af39d9fd28b3c55670ab0a68be03e33fd5961ab191186e7df6ffa
- MD5 4fa4a356d79f238d0533b541117c32ff
- SHA1 c134364162f0514f9cbf3107d764b853832dad72
- SHA512 3babf1aa45c07ba09d7b1ab3fd44ba3e3f35b5d98bb8a09acd860bf73f63d72c7cfe26b611f89e5f080f0232594ddd5b282d708bfc1bc28d4c6a8aa5c2891bba
- SSDEEP 12288:zccC6LvF+TQgqt5BXki1IcSusaRA2l9LwEssqnmrsHhC9IqLYomFsuoPEn0:zc/6Lv4cNP1uusaRX9c1sWC3Yom+ub
- TLSH
  T178157C47BAD991BCD15AC078C35B9633BA73B88A02317DBF03E496302E69E512F1D719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion
- Detects executables referencing combination of virtualization drivers
- Detects ransomware indicator
- Enumerates VirtualBox DLL files
- Enumerates VirtualBox registry keys
  defense_evasion
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VirtualBox drivers on disk
  defense_evasion
- Looks for VirtualBox executables on disk
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare drivers on disk
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  defense_evasion
behavioral1 behavioral2