Overview

overview

10

Static

static

10

2026-10-22...uk.exe

windows10-2004-x64

6

2026-10-22...uk.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-10-22_618801eebf0c283747754e8a875b16da_akira_glassworm_icedid_megazord_rusty-stealer_ryuk
  • Size 4.2MB
  • Sample261024-ndc28seg97
  • SHA256 d2a4c3fd5d1f486dbe069fc157996ee41f952b659ee9b9ed8332f5da3b32f2db
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target
      2026-10-22_618801eebf0c283747754e8a875b16da_akira_glassworm_icedid_megazord_rusty-stealer_ryuk
    • Size 4.2MB
    • SHA256 d2a4c3fd5d1f486dbe069fc157996ee41f952b659ee9b9ed8332f5da3b32f2db
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    defense_evasiondiscoveryexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery

    • Uses WMI to collect hardware manufacturer information

      Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks