Analysis
- max time kernel
150s - max time network
157s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 06:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
- Size 37.6MB
- Sample260808-heygnsbj7y
- SHA256 a3a65418e8a0e7002dc7cc81eaa56905008c6dec7cc6dfb8f7ca5da1e6c6c770
- MD5 0df6ccf6523f797104af978409fbdc19
- SHA1 8abf43c16e27b0e26a4365e0d522e359c402774a
- SHA512 3a22cbba3a84993521dbcb3e3044b3e220abe7825c01d16e3121fdbd90e18981905ac901a6dc7dfc1b6a014345f7cd8272815efcfa302d1526771126ad055314
- SSDEEP 393216:KHt6K4CmRCnkJnqmmwpBQ6hkjlXoJWiu5NOfm:K41qmt32iCu
- TLSH T1F2874B167B99549DD1BBC074934B8B22BA3130EA0B356AFB45D082792F39EF46E3C714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1580 2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_0df6ccf6523f797104af978409fbdc19_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1580
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\D3DSCache\67754f9ecf5b968f\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
- Size 64KB
- SHA256 6f4e2fb6d67b50e5d3a9f2702ea02c18dfc8a686aaa8cd38e00025a9f671514c
- MD5 7a9319abff8fd583197956ae3a508b4a
- SHA1 2f7d84983c3eb049b8a3ae0e95b0ee3b42f1ca48
- SHA512 1726a079f6ce9b6e1da9b703be13009da3137a6257250c2a2a407d9c93aff291bc8f36952ffde2cd3d5a91a0e89a3499b926acf7a7a858233a0e37076963c104
- SSDEEP 6:0/0lraZaRrpyncmQI2qz5CkkHR3Td44EilMljBlt7QNufXO/WC3kCyD:Osra8RrKcDukhx3qDljBltkuf+OCU1D
- TLSH T182537D4E32969B2BC9121770498F05B87B3DA31EBF17002301D0C722C475B65CAA328C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\D3DSCache\67754f9ecf5b968f\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
- Size 4B
- SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
- MD5 f49655f856acb8884cc0ace29216f511
- SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
- SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\D3DSCache\67754f9ecf5b968f\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
- Size 51KB
- SHA256 19201fb8ceda73d8e8af9836b16bb552dff1e20985835ddd82e9ce674d63ba3d
- MD5 49692cf50d9c8ab40a9007812355b205
- SHA1 e8a7c76ad302b732ba2d0075fd50ab166761dfce
- SHA512 e343fc37b8993cc5192148780bb694ef31876d1f849e9a3a77f9c28a7091f679693636e9184b0349a927cac1d0d4f74caa4f1c03af111f471c289ad8f7c5c732
- SSDEEP 768:Pg5dTxwGBCDnpKFr5YcXXu0PFOnWj827YZ1UODHYal/SNn8rlmwNXweNUhFJ:47TubLULLPFGu0Z19HYa4x8rZ2r3J
- TLSH T10B336D8389C1ADD2F061F53EC9E9C6E1E33BC0885F164FEEA1F6D56ED90755708428A1
- MD5 SHA1 SHA512 SSDEEP TLSH