82685eb6b71f24585e11d507570230232a0a17c7a8c2203f583d30c4d51421b0

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 13:15

Target
2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe
Size 4.8MB
Sample260925-qhhjmaxajf
SHA256 82685eb6b71f24585e11d507570230232a0a17c7a8c2203f583d30c4d51421b0
MD5 2641a732e27c9231fe2042f304326d7d
SHA1 0fc7bbea31c072e16e3782108f310177879c659b
SHA512 73c0a7a21e65e1a3967577bffdb37768f1830f54e0ed48101030c8965e45354be0c412bb92643534bc51e0e6153927d8bd564aba4220f6374a507d35b20989e8
SSDEEP 49152:h4+rSq7nwKG7HXEk50fIdo+foeMXSjvT8hTbb21xOjuksLbC0D7F9lJHV4FX:aRbefM3o9SmDji7F9vH
TLSH
T134364A12BA9794ACC599C074834A46735A71B0CA0B35BEFF05D482753FAAAB41F3C76C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1804 set thread context of 4884	1804	2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe	90

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1804 wrote to memory of 4884	1804	2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe	90
PID 1804 wrote to memory of 4884	1804	2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe	90
PID 1804 wrote to memory of 4884	1804	2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe	90
PID 1804 wrote to memory of 4884	1804	2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe	90
PID 1804 wrote to memory of 4884	1804	2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe	90
PID 1804 wrote to memory of 4884	1804	2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe	90
PID 1804 wrote to memory of 4884	1804	2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe	90

C:\Users\Admin\AppData\Local\Temp\2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:1804
- C:\Users\Admin\AppData\Local\Temp\2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe
  "C:\Users\Admin\AppData\Local\Temp\2026-09-24_2641a732e27c9231fe2042f304326d7d_akira_glassworm_icedid_rusty-stealer.exe"
  2⤵
  PID:4884

memory/1804-0-0x0000000140000000-0x0000000140505000-memory.dmp

Download

memory/1804-3-0x0000000140000000-0x0000000140505000-memory.dmp

Download

memory/4884-1-0x0000000140000000-0x0000000140050000-memory.dmp

Download

memory/4884-2-0x0000000140000000-0x0000000140050000-memory.dmp

Download