Analysis
- max time kernel
149s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
12/09/2026, 19:55
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-12_aa068b65433876d1fe1786365bd91340_acrstealer_amadey_glassworm.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_aa068b65433876d1fe1786365bd91340_acrstealer_amadey_glassworm.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
General
- Target 2026-09-12_aa068b65433876d1fe1786365bd91340_acrstealer_amadey_glassworm.exe
- Size 59.3MB
- Sample260912-ynhetawsgs
- SHA256 b985d16583c3c47b43a1ef63b6b3b0e0918a9eace41ef2596fb0b58f2739dd1e
- MD5 aa068b65433876d1fe1786365bd91340
- SHA1 c2b08b0283ade0d6d44724719d328f7b26edd022
- SHA512 5f8e4b79ba87f6a79d3ab88d7b72009cc5c4435150c594a0bf748be62ec72f5a7ec9f22f5f6d2a99bc7c2540eaf5989292ea379b3eaa10e6a683b59fc9b1ede6
- SSDEEP 786432:oi4ReAfyqzuTbVHEcoUzewdz/j+RUMb6VCmrinTMaOcGa:HSeA6rHEzUze0/OBmoTXOc
- TLSH T143D7AE7A61B9C029D1AAC13ED5974F42BB3170A91B36C3F72294C2B11F26BC4593E7B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Custom signatureDetects executables containing URLs to raw contents of a Github gist 1 IoCs
resource yara_rule behavioral1/memory/3264-0-0x0000000000AE0000-0x0000000004637000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL - Custom signatureDetects executables packed with VMProtect. 1 IoCs
resource yara_rule behavioral1/memory/3264-0-0x0000000000AE0000-0x0000000004637000-memory.dmp INDICATOR_EXE_Packed_VMProtect