8693d0c1bc81a28d1068bc2f3f53b4a1bd54fad7e48f06bacdafea036d3e2a31

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 23:29

Target
2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe
Size 1.7MB
Sample260816-3grgcsge36
SHA256 8693d0c1bc81a28d1068bc2f3f53b4a1bd54fad7e48f06bacdafea036d3e2a31
MD5 6de4512607e87132f9264fac5aa00d7a
SHA1 5dc32abbf39820d979324795a0297b6751a88e91
SHA512 e5cafddc8f250c281f511d95d340fb451d1f79164031fa7e215c671652f5e85d6448cc9461d685e8e54d6744e927a9aae0166e43c2799ad6e33d10ae0113b2a3
SSDEEP 24576:EEHebP9FOC7EIiWAWb6IZdZ3wM0Vs4GlFMDVIH06iy3ePbuIe:QO6mIT5w1stYIU6iKke
TLSH
T15C856C606E5949ADC09AC070824A8B726A3170CF0F35B9FF458192783F7AAF52F3D765
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3396 set thread context of 5416	3396	2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe	90

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 3396 wrote to memory of 5416	3396	2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe	90
PID 3396 wrote to memory of 5416	3396	2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe	90
PID 3396 wrote to memory of 5416	3396	2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe	90
PID 3396 wrote to memory of 5416	3396	2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe	90
PID 3396 wrote to memory of 5416	3396	2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe	90
PID 3396 wrote to memory of 5416	3396	2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe	90
PID 3396 wrote to memory of 5416	3396	2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe	90
PID 3396 wrote to memory of 5416	3396	2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe	90

C:\Users\Admin\AppData\Local\Temp\2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:3396
- C:\Users\Admin\AppData\Local\Temp\2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe
  "C:\Users\Admin\AppData\Local\Temp\2026-08-16_6de4512607e87132f9264fac5aa00d7a_akira_glassworm_icedid_rusty-stealer.exe"
  2⤵
  PID:5416

memory/3396-0-0x0000000140000000-0x00000001401C1000-memory.dmp

Download

memory/3396-3-0x0000000140000000-0x00000001401C1000-memory.dmp

Download

memory/5416-2-0x0000000140000000-0x000000014001A000-memory.dmp

Download

memory/5416-1-0x0000000140000000-0x000000014001A000-memory.dmp

Download