General

  • Target
    2026-08-09_7098d02e92bc0e142028dead3e474928_akira_glassworm_rusty-stealer
  • Size 7.1MB
  • Sample260809-clk72agd34
  • SHA256 e6e9f7b234c0c9e0fd4dce723bfd6f0d7284faec65f8eab62ab958675b7fb53b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-09_7098d02e92bc0e142028dead3e474928_akira_glassworm_rusty-stealer
    • Size 7.1MB
    • SHA256 e6e9f7b234c0c9e0fd4dce723bfd6f0d7284faec65f8eab62ab958675b7fb53b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects executables containing URLs to raw contents of a Github gist

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Deletes itself

    • Executes dropped EXE

    • Checks whether UAC is enabled

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks