General
- Target 2026-08-10_1530662d7e0555cd90a1e70c5dcc64be_akira_cobalt-strike_glassworm_icedid_rusty-stealer
- Size 998KB
- Sample260810-dhv4hatyft
- SHA256 099b9c64fe38e6d9e857f681ca1d3befedc62991fbf994525220fe38f9901e34
- MD5 1530662d7e0555cd90a1e70c5dcc64be
- SHA1 fb05dd54e48d7cababd20a93b2c1562a425b2ac5
- SHA512 a626533e1118508a9ab7c61144b5f7d71a9d6901dfddab855bf577e4278119aba3c025e819f7b6b16ba447081aa73f2c56e65a85d3d6120ee5eacd1b7c585957
- SSDEEP 12288:8BOcmyrjNrgGtUX61VEiDQLuiPlpx+JkmKLDXaE2HJOMGMARny:8BjHASVPQLuiPlimLD2JO/t
- TLSH T169256B03E69585FCD95EC078C7669532AA33B89E0B30B5EF6AD42B143E27E915F2D301
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1530662d7e0555cd90a1e70c5dcc64be_akira_cobalt-strike_glassworm_icedid_rusty-stealer.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1530662d7e0555cd90a1e70c5dcc64be_akira_cobalt-strike_glassworm_icedid_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_1530662d7e0555cd90a1e70c5dcc64be_akira_cobalt-strike_glassworm_icedid_rusty-stealer
- Size 998KB
- SHA256 099b9c64fe38e6d9e857f681ca1d3befedc62991fbf994525220fe38f9901e34
- MD5 1530662d7e0555cd90a1e70c5dcc64be
- SHA1 fb05dd54e48d7cababd20a93b2c1562a425b2ac5
- SHA512 a626533e1118508a9ab7c61144b5f7d71a9d6901dfddab855bf577e4278119aba3c025e819f7b6b16ba447081aa73f2c56e65a85d3d6120ee5eacd1b7c585957
- SSDEEP 12288:8BOcmyrjNrgGtUX61VEiDQLuiPlpx+JkmKLDXaE2HJOMGMARny:8BjHASVPQLuiPlimLD2JO/t
- TLSH T169256B03E69585FCD95EC078C7669532AA33B89E0B30B5EF6AD42B143E27E915F2D301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1