Analysis
- max time kernel
148s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 15:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_eda8d84a1afe0cb508848908e2089c23_akira_glassworm_rusty-stealer.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_eda8d84a1afe0cb508848908e2089c23_akira_glassworm_rusty-stealer.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-09-29_eda8d84a1afe0cb508848908e2089c23_akira_glassworm_rusty-stealer.exe
- Size 4.5MB
- Sample260930-sr9etabd62
- SHA256 bfc9aa59e74e1edb4bac2824878346fc6bf7e6bf157da064b90f777364b2f229
- MD5 eda8d84a1afe0cb508848908e2089c23
- SHA1 de86f43bc5f410e9ff8ef7964a9375cb0c22c539
- SHA512 a52a0537147ca6f1fc8e83e034d5408dbda5e630e14c07f548e97a21c3a8b61d8944d094895348fba6a85abdee09e8beb4dab330e9dd1127f51d456db3e0be0c
- SSDEEP 49152:f6gNaohvoiV7uEyVPA2oeeR1mhOXdJ4tJC6X0BuxEBUy3m3KQXICXpjxub30GZ3w:oo7J1mhOXdJKCPuThYGO30GYRhkcU+
- TLSH T17A267B03F26252E8C06AC5B4535AA232F7353C8D432579EF5BD09B212E65FD06B3DB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4908 2026-09-29_eda8d84a1afe0cb508848908e2089c23_akira_glassworm_rusty-stealer.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4908 wrote to memory of 5260 4908 2026-09-29_eda8d84a1afe0cb508848908e2089c23_akira_glassworm_rusty-stealer.exe 91
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_eda8d84a1afe0cb508848908e2089c23_akira_glassworm_rusty-stealer.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_eda8d84a1afe0cb508848908e2089c23_akira_glassworm_rusty-stealer.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4908 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe2⤵PID:5260
-