General
- Target 2026-08-09_11a81cca991d5996d8a84f588416bfdf_akira_glassworm_rusty-stealer
- Size 870KB
- Sample260809-vramlavzcv
- SHA256 28277f04f882928bc2eddaf29f9ecd0605a939e9952b53e5c629a5d9f2b1b43e
- MD5 11a81cca991d5996d8a84f588416bfdf
- SHA1 56a8952483374ef006cb6cd4a1672bba5466fe06
- SHA512 e9d7e748959b4c9aa0761fe3175d5b419960c6ce6ebb318a89ace98baffe2321a2865083225ad3f57bb2a40e8e10ced06650777a792d33dccc185b68f774c96d
- SSDEEP 12288:wjDPb4JB7FrnmGcbqKlZWnZQnyB4FmE4CXQ+twdYFTvjrDHc5VE+XZJAfdLyE4:EgTpcWKlEqyB4FU+twaTXDKVNZJAF
- TLSH T1F215C01AAB4448F9D489C874C3479A635AB674CB1B36A5FF02D212243F7EAF51F2C319
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_11a81cca991d5996d8a84f588416bfdf_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_11a81cca991d5996d8a84f588416bfdf_akira_glassworm_rusty-stealer
- Size 870KB
- SHA256 28277f04f882928bc2eddaf29f9ecd0605a939e9952b53e5c629a5d9f2b1b43e
- MD5 11a81cca991d5996d8a84f588416bfdf
- SHA1 56a8952483374ef006cb6cd4a1672bba5466fe06
- SHA512 e9d7e748959b4c9aa0761fe3175d5b419960c6ce6ebb318a89ace98baffe2321a2865083225ad3f57bb2a40e8e10ced06650777a792d33dccc185b68f774c96d
- SSDEEP 12288:wjDPb4JB7FrnmGcbqKlZWnZQnyB4FmE4CXQ+twdYFTvjrDHc5VE+XZJAfdLyE4:EgTpcWKlEqyB4FU+twaTXDKVNZJAF
- TLSH T1F215C01AAB4448F9D489C874C3479A635AB674CB1B36A5FF02D212243F7EAF51F2C319
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.