Overview

overview

10

Static

static

10

2026-09-10...er.exe

windows10-2004-x64

9

2026-09-10...er.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-10_5a9c4ba5b947f4d112f93d967b78466a_akira_glassworm_icedid_rusty-stealer
  • Size 2.3MB
  • Sample260910-t2dassvvaz
  • SHA256 5dd45ab244f9621f56f70e79a32257e468c0ccbdab49388606e63dbc740abc09
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target
      2026-09-10_5a9c4ba5b947f4d112f93d967b78466a_akira_glassworm_icedid_rusty-stealer
    • Size 2.3MB
    • SHA256 5dd45ab244f9621f56f70e79a32257e468c0ccbdab49388606e63dbc740abc09
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    defense_evasiondiscoveryexecution

    • Enumerates VirtualBox registry keys

      defense_evasion

    • Looks for VirtualBox Guest Additions in registry

      defense_evasion

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to get system information as a root user.

      execution

    • Looks for VMWare Tools registry key

      defense_evasion

    • Looks for VMWare services registry key.

      defense_evasion

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks