Analysis
- max time kernel
150s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/08/2026, 09:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
- Size 36.7MB
- Sample260815-lv7bastdpg
- SHA256 61967d39932e2d1d867591f33c738c16d7f62ccede0fa5bb04050683964ca3ff
- MD5 08fcf8cc871b617679898bf0d7929ace
- SHA1 c9174e5470da3a8049fe51eda0c612c799d1f33c
- SHA512 c8c18bebe6b9012e74db7df2a7a2f9b3cd8646a14c6403915547529b05ea3a59337a8ab04c2987928ff018a311e907c2c9ac197a3c338160d96bf6b12609abcb
- SSDEEP 393216:kCDroc+ZPGc2MLXD9CG7Jr4Eprzcjbemk2hNGPGnp7tpr9:PMpJrMkdatn
- TLSH T170873B157B5998ADE07BC07483878F626A3130EA0B356AFB44D482792F39EF56E3D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 1996 2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-15_08fcf8cc871b617679898bf0d7929ace_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1996
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\D3DSCache\98be032338b4121d\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
- Size 64KB
- SHA256 00f5424fd4154b9d7f84582ecbf32f0f3ed578f7c44be91fdb2efbc4c9fb7337
- MD5 ef3103b0bab5dd23f8e7b77a70be20e7
- SHA1 b78ce18616d7275754b78be9597d29b5aa792bd2
- SHA512 bb12704a43ef676a165287ba3b89f2e45f17282748140aa066679eb304d1c009b95d7ea8dfe5c6b8a7977469866fde791934e15eb56e3baa718b6ec947a52814
- SSDEEP 6:RF0lraZaRrpyncmQI2qz5CkkHR3Td44EilMljBlt7QNufXO/WC3kCGE:zsra8RrKcDukhx3qDljBltkuf+OCUHE
- TLSH T193537D4E32929B2BC8121675498F05683B3DA30ABF67001301D0C322C475B65CA6328C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\D3DSCache\98be032338b4121d\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
- Size 4B
- SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
- MD5 f49655f856acb8884cc0ace29216f511
- SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
- SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\D3DSCache\98be032338b4121d\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
- Size 51KB
- SHA256 2d9ad046f114c08036cafea2c8b6cf650d3c7f5583779782d5107a9eac876430
- MD5 f543d3c676186d4773fc8aeec217d202
- SHA1 7b0baec3b5cb83ff93d93546a3feb3ecb78b55b3
- SHA512 080c4f1004b3e8b5b63f8ccf64dc44d81054b99c7ac5f963aff2ba4b5f779d7d1db0397d2f81a6227f659d1ec9e173afc188998a46e8847c5aeca273ec0862fb
- SSDEEP 768:Ag5dTxwGBCDnpKFr5YcXXu0PFOnWj827YZ1UODHYal/SNn8rlmwNXweNUhFJ:j7TubLULLPFGu0Z19HYa4x8rZ2r3J
- TLSH T1C3336D8389C1ADD2F061F53EC9E9C6E1E33BC0886F164FEEA0F6D56ED90755708428A1
- MD5 SHA1 SHA512 SSDEEP TLSH