General
- Target 2026-08-19_bd5ff2aa1568ab360bd00973d670bd81_akira_glassworm_rusty-stealer
- Size 229KB
- Sample260819-e553nadn51
- SHA256 0447c15031e9c20bf3e54fff070fc9f3315a189c97d223459ffedf6bda21923c
- MD5 bd5ff2aa1568ab360bd00973d670bd81
- SHA1 0ecf3633dfaf5605edba03e2c0aa82b59541095d
- SHA512 30e388b9c06d28858e85d9e6e00d12f4a54eef3e816b1be51baaac06aa84a10563bc115a1d546abaf5d29c54754839e7345c40e26664906f7c2ad9f8bd6e24e4
- SSDEEP 6144:a/omXJR2H4kQus6tXC6mFEokG7VrlZtczpIQP54rSM3I5K:a/lT2YkDFNRmHprTcFInrSdK
- TLSH T1CD345B223A995DACE556C078C3468663693678CA0B32F9FF02D441352F6ABF67F3C614
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_bd5ff2aa1568ab360bd00973d670bd81_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_bd5ff2aa1568ab360bd00973d670bd81_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
ps1.dropper
http://bore.pub:41992/tasks?id=6595ee466fd57_1236
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
ps1.dropper
http://bore.pub:41992/tasks?id=6595ee48c67a5_1540
Targets
-
- Target 2026-08-19_bd5ff2aa1568ab360bd00973d670bd81_akira_glassworm_rusty-stealer
- Size 229KB
- SHA256 0447c15031e9c20bf3e54fff070fc9f3315a189c97d223459ffedf6bda21923c
- MD5 bd5ff2aa1568ab360bd00973d670bd81
- SHA1 0ecf3633dfaf5605edba03e2c0aa82b59541095d
- SHA512 30e388b9c06d28858e85d9e6e00d12f4a54eef3e816b1be51baaac06aa84a10563bc115a1d546abaf5d29c54754839e7345c40e26664906f7c2ad9f8bd6e24e4
- SSDEEP 6144:a/omXJR2H4kQus6tXC6mFEokG7VrlZtczpIQP54rSM3I5K:a/lT2YkDFNRmHprTcFInrSdK
- TLSH T1CD345B223A995DACE556C078C3468663693678CA0B32F9FF02D441352F6ABF67F3C614
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.