Analysis
- max time kernel
150s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 05:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
- Size 35.8MB
- Sample260809-gjcv4aak41
- SHA256 6b739858afa0d8fbd92c182d2cd71aad9b31a15de7c0da5d93200fa5403f47e3
- MD5 137fdf137e5412f7267bd137f964ae04
- SHA1 78d97e6129882b6f6d83b05639233b97b5ac45dd
- SHA512 aa25a90a7dd29f9e8b5e8d2802d08a24990d7100ad83066f5c81dd1547305d58d5bbb8f05f34bfdb953d8d68601d8893279002157a030984d3a01cb6d3bfbe07
- SSDEEP 393216:+Vw0tY8KUH+9/kt68TpsV/vvpNpcXEe3ulPnZL84bI:+uMt6VprZ84M
- TLSH T19F873B257B5998ADD0BBC07482874F626A3170EA0B357AFB44D082792F39EF95E3D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1184 2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_137fdf137e5412f7267bd137f964ae04_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1184
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\D3DSCache\52cf37f18c2008de\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
- Size 64KB
- SHA256 187c6f386b4d302d94df89e8214036af45a2d33b2e9fbf28ced263e0567e1e68
- MD5 70bcc9921189de025dcbbd7e7d4fcec2
- SHA1 d09cd4c0914aa39a9efefe850dbb063e451ea0be
- SHA512 af1acb30e0cf970b31f7597883593cee4ba4b3df44e7325d4bf22c295b9ef789809aebc3eb9f06c7ae7c66ae74f74dc157f6c50134b7fffa2d2142fa35bbf806
- SSDEEP 6:jF0lraZaRrpyncmQI2qz5CkkHR3Td44EilMljBlt7QNufXO/WC3kCPpUD:Bsra8RrKcDukhx3qDljBltkuf+OCUCY
- TLSH T1EF537D9E3292DB2BC9122670498F05683B3DA34A7F17002301D0C322C47AB65CA6328D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\D3DSCache\52cf37f18c2008de\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
- Size 4B
- SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
- MD5 f49655f856acb8884cc0ace29216f511
- SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
- SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\D3DSCache\52cf37f18c2008de\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
- Size 51KB
- SHA256 5e21933f75e401322f8ce902ab08e746f0f907c82e5ce8534d97b4a0a373855b
- MD5 32824b43c3423f6f5209cef66a119452
- SHA1 b2614bc6ce6e6f9a01411eba5212253127c044d2
- SHA512 fd4b2c7ccce4a8743b6424637d3c088e82d1f1d20e6d92ea035637ac7bbf39a836c3943a61519ae94d22c9612ed6bd80b134b3bcc414746fddf465d4b779f5ce
- SSDEEP 768:Cg5dTxwGBCDnpKFr5YcXXu0PFOnWj827YZ1UODHYal/SNn8rlmwNXweNUhFJ:57TubLULLPFGu0Z19HYa4x8rZ2r3J
- TLSH T1BE336D8389C1ADD2F061F53EC9E9C6E1E33BC0885F164FEEA0F6D56ED90755708428A1
- MD5 SHA1 SHA512 SSDEEP TLSH