General
- Target 2026-08-25_9f93caf5d4b9837d50681fe227564219_akira_glassworm_rusty-stealer
- Size 13.7MB
- Sample260826-st168ayxe1
- SHA256 514b2d46c6cf080c710c003ec4cc16fe2e4859599078d6c76f3450bd8b2f9645
- MD5 9f93caf5d4b9837d50681fe227564219
- SHA1 d3db6704716237880eda9e3e0906525f82f592e3
- SHA512 c3b68442165156344c87bb1ec4e4cf58e01ed314cd9090ded8f63c2045990d09e5b6ac3e6442a28e814112c90ac8e9c825842a2d9b1ded7c26eb727f7e8dae44
- SSDEEP 393216:Vi0Zjw95ZIWCg/YLnslnAPQwXjJGaMVKiv6x/kT:Vib5sglA7VGaaKiv6q
- TLSH T1D2E6330BD981D7F9C999C03082675527B531BCC91721FBDF03A8A5326D2A7D06F3AB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-25_9f93caf5d4b9837d50681fe227564219_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_9f93caf5d4b9837d50681fe227564219_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_9f93caf5d4b9837d50681fe227564219_akira_glassworm_rusty-stealer
- Size 13.7MB
- SHA256 514b2d46c6cf080c710c003ec4cc16fe2e4859599078d6c76f3450bd8b2f9645
- MD5 9f93caf5d4b9837d50681fe227564219
- SHA1 d3db6704716237880eda9e3e0906525f82f592e3
- SHA512 c3b68442165156344c87bb1ec4e4cf58e01ed314cd9090ded8f63c2045990d09e5b6ac3e6442a28e814112c90ac8e9c825842a2d9b1ded7c26eb727f7e8dae44
- SSDEEP 393216:Vi0Zjw95ZIWCg/YLnslnAPQwXjJGaMVKiv6x/kT:Vib5sglA7VGaaKiv6q
- TLSH T1D2E6330BD981D7F9C999C03082675527B531BCC91721FBDF03A8A5326D2A7D06F3AB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.