General
- Target 2026-08-23_37bd594aa5cb40b36c17117edb45ddcc_akira_glassworm_icedid_rusty-stealer
- Size 1.7MB
- Sample260824-rda5esyfmh
- SHA256 598d3ed94b7873627a8c0fe05e462ce970602042e65f5af7b13cae146033db6d
- MD5 37bd594aa5cb40b36c17117edb45ddcc
- SHA1 61b9e62a8bb219cff006073fb5d525ef7f4b2e9e
- SHA512 676edbfab2b0494adb93e1de2bcaa89873ef1d80bcb820cf8865f76628c851a17ae801b8347ac30b0ab1ce6e05c2c24cdf454a0a38a13726c4772fe8d754c4d4
- SSDEEP 24576:2+9HsRvU0R0PKuztmuYB3OrMqTcU6B9oR1M4EpWFfk:FMdBAMGDc9XoR1MJk
- TLSH T10B857B53FA6684F8C55AC078C31A9233EA32BC8D073576EB67D45A243E66FD06A3C714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_37bd594aa5cb40b36c17117edb45ddcc_akira_glassworm_icedid_rusty-stealer.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_37bd594aa5cb40b36c17117edb45ddcc_akira_glassworm_icedid_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_37bd594aa5cb40b36c17117edb45ddcc_akira_glassworm_icedid_rusty-stealer
- Size 1.7MB
- SHA256 598d3ed94b7873627a8c0fe05e462ce970602042e65f5af7b13cae146033db6d
- MD5 37bd594aa5cb40b36c17117edb45ddcc
- SHA1 61b9e62a8bb219cff006073fb5d525ef7f4b2e9e
- SHA512 676edbfab2b0494adb93e1de2bcaa89873ef1d80bcb820cf8865f76628c851a17ae801b8347ac30b0ab1ce6e05c2c24cdf454a0a38a13726c4772fe8d754c4d4
- SSDEEP 24576:2+9HsRvU0R0PKuztmuYB3OrMqTcU6B9oR1M4EpWFfk:FMdBAMGDc9XoR1MJk
- TLSH T10B857B53FA6684F8C55AC078C31A9233EA32BC8D073576EB67D45A243E66FD06A3C714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Drops file in System32 directory