General
- Target 2026-08-10_6cb339671a19c992f420565044b6f510_akira_glassworm_rusty-stealer
- Size 1.1MB
- Sample260810-a9ph9agl81
- SHA256 e6c0783ca4ab60c4cad97ca990c549d05434f68d79f4d249a5b755c79c64242e
- MD5 6cb339671a19c992f420565044b6f510
- SHA1 c15a22c31ceba677e2d823a969b2606cecbe414f
- SHA512 478fd34a16bd73b1272a776e65ffe23a06d1388a90523dfe60b0d9432e7af20ef987ccde1bc5a7f1c660f86414bf7e91e26d11e74e470ef580440496b5fc7f79
- SSDEEP 12288:NFFK50l34mIXr2guIcuHI4pETJs63OyIs3+w:vFDlrEuIdHjpETJs1K
- TLSH T1E635F902F95658B2D05B8476C1434C22AE1572EF163FEE5F06F9612C2FEE7E98728B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_6cb339671a19c992f420565044b6f510_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_6cb339671a19c992f420565044b6f510_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_6cb339671a19c992f420565044b6f510_akira_glassworm_rusty-stealer
- Size 1.1MB
- SHA256 e6c0783ca4ab60c4cad97ca990c549d05434f68d79f4d249a5b755c79c64242e
- MD5 6cb339671a19c992f420565044b6f510
- SHA1 c15a22c31ceba677e2d823a969b2606cecbe414f
- SHA512 478fd34a16bd73b1272a776e65ffe23a06d1388a90523dfe60b0d9432e7af20ef987ccde1bc5a7f1c660f86414bf7e91e26d11e74e470ef580440496b5fc7f79
- SSDEEP 12288:NFFK50l34mIXr2guIcuHI4pETJs63OyIs3+w:vFDlrEuIdHjpETJs1K
- TLSH T1E635F902F95658B2D05B8476C1434C22AE1572EF163FEE5F06F9612C2FEE7E98728B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Executes dropped EXE
-
Adds Run key to start application