c3bec2240d99606b0d54ede739939eec1cabfe1901ba1ec9e8cb73c9112d8e0f | Triage™

Login
Reports

Overview

overview

9

Static

static

3

2026-09-11...er.exe

windows10-2004-x64

9

2026-09-11...er.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-11_558a6297df46d8dc37fcdf541f48c91c_akira_glassworm_quasar-rat_rusty-stealer
Size 15.3MB
Sample260912-l6ltqshe29
SHA256 c3bec2240d99606b0d54ede739939eec1cabfe1901ba1ec9e8cb73c9112d8e0f
MD5 558a6297df46d8dc37fcdf541f48c91c
SHA1 4650e8ad83c064794b28f0d6227f49a22ecd3eda
SHA512 ce16dba8ec5333ca0de0b6253e37fbc25ff96f18e755f9323e78fb3fdde3bf8f91b98219e5bb4d1b174a7eb1056cbc57214949e8e83a191764199495675c5db8
SSDEEP 98304:PinKJu4SWtyuQL24dNQTZRNsW3iPKlWHPZtBvTGMPx1Cd+j74MnQkK6oJ2yKge:PhbQLzd5glW3cM50W7Qkj1yKf
TLSH
T1E4F6F7257B5A99ACC05BC4B4838B4A72497130CB0B35B9FF448492392F6DBF96F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-09-11_558a6297df46d8dc37fcdf541f48c91c_akira_glassworm_quasar-rat_rusty-stealer.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

18 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

2026-09-11_558a6297df46d8dc37fcdf541f48c91c_akira_glassworm_quasar-rat_rusty-stealer.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

17 signatures

150 seconds

defense_evasion discovery trojan

Malware Config

Targets

- Target
  2026-09-11_558a6297df46d8dc37fcdf541f48c91c_akira_glassworm_quasar-rat_rusty-stealer
- Size 15.3MB
- SHA256 c3bec2240d99606b0d54ede739939eec1cabfe1901ba1ec9e8cb73c9112d8e0f
- MD5 558a6297df46d8dc37fcdf541f48c91c
- SHA1 4650e8ad83c064794b28f0d6227f49a22ecd3eda
- SHA512 ce16dba8ec5333ca0de0b6253e37fbc25ff96f18e755f9323e78fb3fdde3bf8f91b98219e5bb4d1b174a7eb1056cbc57214949e8e83a191764199495675c5db8
- SSDEEP 98304:PinKJu4SWtyuQL24dNQTZRNsW3iPKlWHPZtBvTGMPx1Cd+j74MnQkK6oJ2yKge:PhbQLzd5glW3cM50W7Qkj1yKf
- TLSH
  T1E4F6F7257B5A99ACC05BC4B4838B4A72497130CB0B35B9FF448492392F6DBF96F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery trojan
- Enumerates VirtualBox registry keys
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Network Share Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverytrojan

behavioral2

defense_evasiondiscoverytrojan

© 2018-2026

Terms | Privacy