General
- Target 2026-09-04_96a59a1836946815e48a61aec671aa4e_akira_cobalt-strike_glassworm_icedid_rusty-stealer
- Size 405KB
- Sample260905-dc91gavhkf
- SHA256 f0105f21d5c508e370a715a567eeddd6b955d449b4f3987a4048259dfff986eb
- MD5 96a59a1836946815e48a61aec671aa4e
- SHA1 9dffac244762eaad83c0040a9f5794dbd1e12200
- SHA512 e45fc976ef36d83f5930a1dba7c829286affaf9aff0ac7940fac929f6192bb449e57e6e31ace3bc49c5c02ce6b7aaa465b846cf8cd38b27a7eae119537f70974
- SSDEEP 6144:Lnh5MoZynbiQXx19zDIOgrSojTpKiBRwyfWJtEmMATmInen0Y5+qyEV8P5wi5tyQ:jpy70rpFDwyfWJOmN0noEV8hwi5I
- TLSH T13B944B12F65658F8E056C07583568673AA377CCA0B21F9FF029862393E75AE16F3CB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_96a59a1836946815e48a61aec671aa4e_akira_cobalt-strike_glassworm_icedid_rusty-stealer.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_96a59a1836946815e48a61aec671aa4e_akira_cobalt-strike_glassworm_icedid_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_96a59a1836946815e48a61aec671aa4e_akira_cobalt-strike_glassworm_icedid_rusty-stealer
- Size 405KB
- SHA256 f0105f21d5c508e370a715a567eeddd6b955d449b4f3987a4048259dfff986eb
- MD5 96a59a1836946815e48a61aec671aa4e
- SHA1 9dffac244762eaad83c0040a9f5794dbd1e12200
- SHA512 e45fc976ef36d83f5930a1dba7c829286affaf9aff0ac7940fac929f6192bb449e57e6e31ace3bc49c5c02ce6b7aaa465b846cf8cd38b27a7eae119537f70974
- SSDEEP 6144:Lnh5MoZynbiQXx19zDIOgrSojTpKiBRwyfWJtEmMATmInen0Y5+qyEV8P5wi5tyQ:jpy70rpFDwyfWJOmN0noEV8hwi5I
- TLSH T13B944B12F65658F8E056C07583568673AA377CCA0B21F9FF029862393E75AE16F3CB14
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1