General
- Target 2026-08-17_872013714decb722f1f0b398e768584f_akira_glassworm_rusty-stealer
- Size 4.0MB
- Sample260817-gyfwasvxat
- SHA256 08f005cff7f8a589338b93e24b42f96dacb5d6527098ba5d1af926c686dece76
- MD5 872013714decb722f1f0b398e768584f
- SHA1 a8e8e7754b39975e72e1e8c84d33a1f75da50a7b
- SHA512 24e41b18e3bf31a8a26156d2b36fc727f12049dfce56d64e11257721b5911b1baaa963bdd8c4087e099c26ae736df66db1cbd46c44023db2cca95d89d881c769
- SSDEEP 49152:150865ViPeY0xxGsxKio1TqqjYfNaBQVe98sY70/9sbFDWa0XfQ0LI6/3Xcnt+Zs:19GYFWIYUI4s0qL+Dx4ujLd4h
- TLSH T16C166D43F69542A9E06EC178C727A233E7F2B8CD0A20B79B1AD4CB61AF53B60575D344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_872013714decb722f1f0b398e768584f_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_872013714decb722f1f0b398e768584f_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_872013714decb722f1f0b398e768584f_akira_glassworm_rusty-stealer
- Size 4.0MB
- SHA256 08f005cff7f8a589338b93e24b42f96dacb5d6527098ba5d1af926c686dece76
- MD5 872013714decb722f1f0b398e768584f
- SHA1 a8e8e7754b39975e72e1e8c84d33a1f75da50a7b
- SHA512 24e41b18e3bf31a8a26156d2b36fc727f12049dfce56d64e11257721b5911b1baaa963bdd8c4087e099c26ae736df66db1cbd46c44023db2cca95d89d881c769
- SSDEEP 49152:150865ViPeY0xxGsxKio1TqqjYfNaBQVe98sY70/9sbFDWa0XfQ0LI6/3Xcnt+Zs:19GYFWIYUI4s0qL+Dx4ujLd4h
- TLSH T16C166D43F69542A9E06EC178C727A233E7F2B8CD0A20B79B1AD4CB61AF53B60575D344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables Discord URL observed in first stage droppers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables referencing combination of virtualization drivers
-
Detects executables referencing virtualization MAC addresses
-
UPX dump on OEP (original entry point)