General
- Target 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer
- Size 27.9MB
- Sample261113-sqlx5ac16r
- SHA256 7e19013a3252b4522897eb30c388767425009bbc3de82680613317ebaaa140c0
- MD5 29958aa35778d835adc2fd4e48a0d4b7
- SHA1 c0f5aef59c44f08cc11f11c4a133bd1cb3419db1
- SHA512 9ce1193c87a8d508768cc2f5b01c718e37efed4ad77deba5b4173eacdab4cc5f94e529a569a67357649cb5294066197d1bfc7a1df1ab71be9e74bb9ef5b023f2
- SSDEEP 393216:SpF3oRwYF6Z8u/vZNlbNlRmvN6Qjl5MmdTL+dhxbn:5R28EGNvjPtgDxb
- TLSH T172575B257A5B99ADC15AC4B0C38A46A31E6130DB0B35BAFF44C856383F79BF41F38259
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer
- Size 27.9MB
- SHA256 7e19013a3252b4522897eb30c388767425009bbc3de82680613317ebaaa140c0
- MD5 29958aa35778d835adc2fd4e48a0d4b7
- SHA1 c0f5aef59c44f08cc11f11c4a133bd1cb3419db1
- SHA512 9ce1193c87a8d508768cc2f5b01c718e37efed4ad77deba5b4173eacdab4cc5f94e529a569a67357649cb5294066197d1bfc7a1df1ab71be9e74bb9ef5b023f2
- SSDEEP 393216:SpF3oRwYF6Z8u/vZNlbNlRmvN6Qjl5MmdTL+dhxbn:5R28EGNvjPtgDxb
- TLSH T172575B257A5B99ADC15AC4B0C38A46A31E6130DB0B35BAFF44C856383F79BF41F38259
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled