Analysis
- max time kernel
150s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 10:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
- Size 36.3MB
- Sample260810-mq8t1afp21
- SHA256 45c33651f2cdb3162322603eae3ed3863a2c404fcdd191f19df9ffa5681bd921
- MD5 32c83b31bfede36dab3101d88b2c81c4
- SHA1 e6eac060efcee1deae325966533ae626298ad667
- SHA512 06b8c4ef97cc79b3b14cfe6bead13cf4263245e34876480919700e2545d5eb3323c556dbb69312281fcdc7acb205aba2edb29b0784ab37130c1d55a3e3f1a36b
- SSDEEP 393216:lG2F6Vu5ws0jle9+mgJN20p5ocVTeapvwax8Q:Ujlf3j8Q
- TLSH T150873B157B5998ADD0BBC074838B4B72AA3130EA0B356AFB44D482792F39EF55E3D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 484 2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-10_32c83b31bfede36dab3101d88b2c81c4_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:484
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\D3DSCache\ef73daec9b1d01aa\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
- Size 64KB
- SHA256 d2bbf7e045ccf4d79057c1e9a6cc8d6a9e6cae1995516f9738f2369a6eb46e0d
- MD5 2b966bcd172652e971245a673d9444e0
- SHA1 8e70acd25e11f80ee916efc54668b0c37ccf52ed
- SHA512 a5aa9674731ad4de59d3c00683067dc1ef991a4ff18c958619bc159963f743c1c187cebd9ac29a20e4d90bce0051da8d050f94bfac9839333855d3cecb889c66
- SSDEEP 6:lFll0lraZaRrpyncmQI2qz5CkkHR3Td44EilMljBlt7QNufXO/WC3kC2C:Rlsra8RrKcDukhx3qDljBltkuf+OCU/C
- TLSH T16C537D4E32929B2BCC12567049DF05A87B3EA30A7F17041301E0C322C476BA5CA6328C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\D3DSCache\ef73daec9b1d01aa\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
- Size 4B
- SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
- MD5 f49655f856acb8884cc0ace29216f511
- SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
- SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\D3DSCache\ef73daec9b1d01aa\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
- Size 51KB
- SHA256 bf8d7db58e1ef9a36dc67e3e6119fd308373c0d9f591927fc288c9831ce7de42
- MD5 b56aeab0ebc86742f363551a81544294
- SHA1 63d22fc5e105fe3a24ead7a21f627d4b96ab56c1
- SHA512 d3df59297c0354a4ee2dd53e3eddf4883a9acb5dc334a37f3634f5fe971fac7629b5704245b9f4087ab8a843627ddea323bc22af0b5a2ff3edc3f56e2b75504b
- SSDEEP 768:wg5dTxwGBCDnpKFr5YcXXu0PFOnWj827YZ1UODHYal/SNn8rlmwNXweNUhFJ:z7TubLULLPFGu0Z19HYa4x8rZ2r3J
- TLSH T14D336D8389C1ADD2F061F53EC9E9C6E1E33BC0886F164FEEA0F6D56ED90755708428A1
- MD5 SHA1 SHA512 SSDEEP TLSH