General
- Target 2026-08-19_d82bf86395afad6d6bff76ccf2cb79cb_akira_glassworm_rusty-stealer
- Size 6.3MB
- Sample260819-jnydpszcmf
- SHA256 99c39d20bc7dc50756acd23536421753aaec5ba474c33408f4ca586f40b30482
- MD5 d82bf86395afad6d6bff76ccf2cb79cb
- SHA1 83ea5c68fe2a56381035903d91d625b90016550a
- SHA512 b1cc7fd9f2ba747a183bac82eac741019d405626b11fe9e6062ebe49f4e2865b82f2a5aae554154d1e84362ad601b988f36847e69a8ff2648a62f3bbcb972b70
- SSDEEP 49152:B0w9bH0GCFmlbKIu7AczC6dlGauhWfiWn2aOcU0OqIBT3o/Y3JDo4cKvptIzWt2H:jSJeDntNnS5fzt+go+3/xzJnQOQw
- TLSH T1B5668E07E2A581E9C09EC478C35BA637EA32B8C90534B6DF57E40B212F67B506F2D719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_d82bf86395afad6d6bff76ccf2cb79cb_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_d82bf86395afad6d6bff76ccf2cb79cb_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_d82bf86395afad6d6bff76ccf2cb79cb_akira_glassworm_rusty-stealer
- Size 6.3MB
- SHA256 99c39d20bc7dc50756acd23536421753aaec5ba474c33408f4ca586f40b30482
- MD5 d82bf86395afad6d6bff76ccf2cb79cb
- SHA1 83ea5c68fe2a56381035903d91d625b90016550a
- SHA512 b1cc7fd9f2ba747a183bac82eac741019d405626b11fe9e6062ebe49f4e2865b82f2a5aae554154d1e84362ad601b988f36847e69a8ff2648a62f3bbcb972b70
- SSDEEP 49152:B0w9bH0GCFmlbKIu7AczC6dlGauhWfiWn2aOcU0OqIBT3o/Y3JDo4cKvptIzWt2H:jSJeDntNnS5fzt+go+3/xzJnQOQw
- TLSH T1B5668E07E2A581E9C09EC478C35BA637EA32B8C90534B6DF57E40B212F67B506F2D719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.