General
- Target 2026-09-10_ad0ec3d2e6f86633096297ea8d144dfd_akira_glassworm_rusty-stealer
- Size 1.7MB
- Sample260910-pdhs6awwfx
- SHA256 7ee3a7416673e2f288042ed81fddbecb74d5f16a5c30688879e18e994530ed6c
- MD5 ad0ec3d2e6f86633096297ea8d144dfd
- SHA1 754cfa09531fc6cab1b9c297883dda81c0ae43e2
- SHA512 13c5d483e06c2868ede6879ee9a00cbe1fab44943b1452086dddfefee1e217393b841b66ccec79765f876df57730be12c12ef8015e67f6e8ebb463c965635c3a
- SSDEEP 24576:QWSJT4Wz1z05Kl+0ywuxtBPbBYVUWNxbCXox0CEFfOPAy:0JTr100nyJtB9IUWN1Jxniw
- TLSH T1BD856B03E69584FAC49DC078C3579136BA32B88E4B25B6EF2BD45A213E27F906F1D315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-10_ad0ec3d2e6f86633096297ea8d144dfd_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_ad0ec3d2e6f86633096297ea8d144dfd_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_ad0ec3d2e6f86633096297ea8d144dfd_akira_glassworm_rusty-stealer
- Size 1.7MB
- SHA256 7ee3a7416673e2f288042ed81fddbecb74d5f16a5c30688879e18e994530ed6c
- MD5 ad0ec3d2e6f86633096297ea8d144dfd
- SHA1 754cfa09531fc6cab1b9c297883dda81c0ae43e2
- SHA512 13c5d483e06c2868ede6879ee9a00cbe1fab44943b1452086dddfefee1e217393b841b66ccec79765f876df57730be12c12ef8015e67f6e8ebb463c965635c3a
- SSDEEP 24576:QWSJT4Wz1z05Kl+0ywuxtBPbBYVUWNxbCXox0CEFfOPAy:0JTr100nyJtB9IUWN1Jxniw
- TLSH T1BD856B03E69584FAC49DC078C3579136BA32B88E4B25B6EF2BD45A213E27F906F1D315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.