General
- Target 2026-09-10_e2dd149c15d1966d565d01539c251f1a_akira_glassworm_rusty-stealer
- Size 1.5MB
- Sample260910-lj35hatzgw
- SHA256 a3688a83dd4d58ee04b00029b0b7376b0bc3ccd17ddf43c647e72125821b4542
- MD5 e2dd149c15d1966d565d01539c251f1a
- SHA1 d857075ba666bf600abe28fc69838494b4f85957
- SHA512 628991295f1ee0fb4a836edf70bd5175ff609c78a00c0c7e41238c17bb87876263cb7de074435a392d698314b8394c8fe0bab3233f998d48d2f940cec522900e
- SSDEEP 24576:+VO3pzA1YrVulAG/hlKNzMyRiX59gC8YjmP32FfNr2:s+i18sla6taC8t0
- TLSH T169657B43F69984E9C59EC07883169E32AA32B88D0E307AFF6BD45A153E67F905F1D344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-10_e2dd149c15d1966d565d01539c251f1a_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_e2dd149c15d1966d565d01539c251f1a_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_e2dd149c15d1966d565d01539c251f1a_akira_glassworm_rusty-stealer
- Size 1.5MB
- SHA256 a3688a83dd4d58ee04b00029b0b7376b0bc3ccd17ddf43c647e72125821b4542
- MD5 e2dd149c15d1966d565d01539c251f1a
- SHA1 d857075ba666bf600abe28fc69838494b4f85957
- SHA512 628991295f1ee0fb4a836edf70bd5175ff609c78a00c0c7e41238c17bb87876263cb7de074435a392d698314b8394c8fe0bab3233f998d48d2f940cec522900e
- SSDEEP 24576:+VO3pzA1YrVulAG/hlKNzMyRiX59gC8YjmP32FfNr2:s+i18sla6taC8t0
- TLSH T169657B43F69984E9C59EC07883169E32AA32B88D0E307AFF6BD45A153E67F905F1D344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables using Telegram Chat Bot
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1