General
- Target 2026-09-29_200e38b3cf28fd49b45e85b94b6517eb_akira_glassworm_icedid_rusty-stealer
- Size 75.0MB
- Sample260930-e6vcjsxdre
- SHA256 3b56789805a8b84344bd5164fd8617e14aea6b65bfb6bb2a1028f205200eb829
- MD5 200e38b3cf28fd49b45e85b94b6517eb
- SHA1 ad85e7cea19f883b1c7bc3a54520fbfabdf98fe7
- SHA512 92eb9321d7ce5193948b80ed6ebfcd088254c10ee447c460485c6c6dafff8b6953a83617e33f4f0e5f6572cb2d49bc2d11ffe2f4c954561f3e66b932a8f057c4
- SSDEEP 1572864:PwjzgXUu0FDjgj0LPTXBHVC1YzK8uEWRWvnJLh6U5WmuVkK468DHcHHi4XMkk:Pwj20xjgj0TTvAQK8RWIxkIuV78DHcHG
- TLSH T148083383F6A690FDC56AC038934A6233BB36788907317AFB56949A353E51BD02F3D705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_200e38b3cf28fd49b45e85b94b6517eb_akira_glassworm_icedid_rusty-stealer.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_200e38b3cf28fd49b45e85b94b6517eb_akira_glassworm_icedid_rusty-stealer.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_200e38b3cf28fd49b45e85b94b6517eb_akira_glassworm_icedid_rusty-stealer
- Size 75.0MB
- SHA256 3b56789805a8b84344bd5164fd8617e14aea6b65bfb6bb2a1028f205200eb829
- MD5 200e38b3cf28fd49b45e85b94b6517eb
- SHA1 ad85e7cea19f883b1c7bc3a54520fbfabdf98fe7
- SHA512 92eb9321d7ce5193948b80ed6ebfcd088254c10ee447c460485c6c6dafff8b6953a83617e33f4f0e5f6572cb2d49bc2d11ffe2f4c954561f3e66b932a8f057c4
- SSDEEP 1572864:PwjzgXUu0FDjgj0LPTXBHVC1YzK8uEWRWvnJLh6U5WmuVkK468DHcHHi4XMkk:Pwj20xjgj0TTvAQK8RWIxkIuV78DHcHG
- TLSH T148083383F6A690FDC56AC038934A6233BB36788907317AFB56949A353E51BD02F3D705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Executes a VBScript file via the Windows Script Host.