General
- Target 2026-08-10_9977e2671438e993d2576b4cb446679d_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer
- Size 4.1MB
- Sample260810-3pcm6s1fja
- SHA256 8685fb284175ff5dad4ebe15a4b3b12d18fa208f4d56763d9dc485c94f1091df
- MD5 9977e2671438e993d2576b4cb446679d
- SHA1 64f5c84229b21e34562fe192d3f7dc17a13e12fe
- SHA512 c7d46c64fc33415bd0142494761ceeaaa1d4d2fb27f0ac1da54c741ba51ceeeaa81db4271a12d0a55834f911fc5a610ec427048a55ecab60c3fe67ffa8233185
- SSDEEP 49152:lARzBfuZrPjOKXKpNrEFKphv7hX5FvIYLQeoTTHY6NuhmdYebLNiXicJFFRGNzj3:q4ZrPau0r7552IUuhmdh7wRGpj3
- TLSH T163165A42E72911D9C026C174836A6327B761F99E073036EB4ED04B32AEADFE05F78B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_9977e2671438e993d2576b4cb446679d_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_9977e2671438e993d2576b4cb446679d_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_9977e2671438e993d2576b4cb446679d_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer
- Size 4.1MB
- SHA256 8685fb284175ff5dad4ebe15a4b3b12d18fa208f4d56763d9dc485c94f1091df
- MD5 9977e2671438e993d2576b4cb446679d
- SHA1 64f5c84229b21e34562fe192d3f7dc17a13e12fe
- SHA512 c7d46c64fc33415bd0142494761ceeaaa1d4d2fb27f0ac1da54c741ba51ceeeaa81db4271a12d0a55834f911fc5a610ec427048a55ecab60c3fe67ffa8233185
- SSDEEP 49152:lARzBfuZrPjOKXKpNrEFKphv7hX5FvIYLQeoTTHY6NuhmdYebLNiXicJFFRGNzj3:q4ZrPau0r7552IUuhmdh7wRGpj3
- TLSH T163165A42E72911D9C026C174836A6327B761F99E073036EB4ED04B32AEADFE05F78B55
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1