General
- Target 2026-08-20_ccdb9bbc3bf148f07f83d90865278c1b_akira_glassworm_rusty-stealer
- Size 75.0MB
- Sample260820-djyk1syeka
- SHA256 fb7313885eb2e5a4e705ad1744ec62c969bc9507c9e8011d9d1726eddd1d764c
- MD5 ccdb9bbc3bf148f07f83d90865278c1b
- SHA1 329be741e3c62807540bd8f80aab9bfa855a8efb
- SHA512 a942fa6ce0efc9a4f20a3ca06075fb90994e381d125b8538bea026efc6f67368bcca6309acb15ae72afb9578e7190b90c98a225e311d15ee5e3448ba5c706306
- SSDEEP 1572864:V7hgeE7/XDdcHSileYIj0/3+iueeUbdp3bwbVMQsdotYkAxIT6d:V1gew/XDd4eo1bdp38bUdQYZxIs
- TLSH T1A5082343F7A6A1EDC16AC07586165223FB72B84D0721BAEB56908A353F22FE01F7D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_ccdb9bbc3bf148f07f83d90865278c1b_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_ccdb9bbc3bf148f07f83d90865278c1b_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_ccdb9bbc3bf148f07f83d90865278c1b_akira_glassworm_rusty-stealer
- Size 75.0MB
- SHA256 fb7313885eb2e5a4e705ad1744ec62c969bc9507c9e8011d9d1726eddd1d764c
- MD5 ccdb9bbc3bf148f07f83d90865278c1b
- SHA1 329be741e3c62807540bd8f80aab9bfa855a8efb
- SHA512 a942fa6ce0efc9a4f20a3ca06075fb90994e381d125b8538bea026efc6f67368bcca6309acb15ae72afb9578e7190b90c98a225e311d15ee5e3448ba5c706306
- SSDEEP 1572864:V7hgeE7/XDdcHSileYIj0/3+iueeUbdp3bwbVMQsdotYkAxIT6d:V1gew/XDd4eo1bdp38bUdQYZxIs
- TLSH T1A5082343F7A6A1EDC16AC07586165223FB72B84D0721BAEB56908A353F22FE01F7D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Executes a VBScript file via the Windows Script Host.