General
- Target 2026-10-23_4f32fec7f0886b881816bdeae5b7b80e_akira_glassworm_icedid_rusty-stealer
- Size 30.3MB
- Sample261023-pm43rabw8y
- SHA256 7f287f067eb57b2276d976a0a21fb597801758eaebb779bc76c7dcaabf4e645d
- MD5 4f32fec7f0886b881816bdeae5b7b80e
- SHA1 732b3f7416107041b8b3c303a74541d289019ce5
- SHA512 d9d567db2cc1a8ed1886dba9f8c08b020da12ce6f7d8503c6bc64f2b6080e20ad0dd2baeeec9faa5f0b538d1e3da0767f618534ad3b87b7dc904977ec19ca8fe
- SSDEEP 196608:ErtRFeQ2o+G7NaTXT7M9YqQPpA6uXTDdIzM8e1PPM2L:Er9vdMTXnKYqsMPtyi
- TLSH T1AD673B03F69184D4D06AC4B4935AE633EB71BC994A3473FB5BD44B222F2AF906B1C719
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-23_4f32fec7f0886b881816bdeae5b7b80e_akira_glassworm_icedid_rusty-stealer.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_4f32fec7f0886b881816bdeae5b7b80e_akira_glassworm_icedid_rusty-stealer
- Size 30.3MB
- SHA256 7f287f067eb57b2276d976a0a21fb597801758eaebb779bc76c7dcaabf4e645d
- MD5 4f32fec7f0886b881816bdeae5b7b80e
- SHA1 732b3f7416107041b8b3c303a74541d289019ce5
- SHA512 d9d567db2cc1a8ed1886dba9f8c08b020da12ce6f7d8503c6bc64f2b6080e20ad0dd2baeeec9faa5f0b538d1e3da0767f618534ad3b87b7dc904977ec19ca8fe
- SSDEEP 196608:ErtRFeQ2o+G7NaTXT7M9YqQPpA6uXTDdIzM8e1PPM2L:Er9vdMTXnKYqsMPtyi
- TLSH T1AD673B03F69184D4D06AC4B4935AE633EB71BC994A3473FB5BD44B222F2AF906B1C719
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.