2026-04-15_2ad15aa49d8b3f627866c029cfeacce7_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-15_2ad15aa49d8b3f627866c029cfeacce7_akira_glassworm_rusty-stealer
Size 1.6MB
Sample260415-jdcn9aby21
SHA256 723cd1c1ea377887bc5de7349849b49aff255efcef589eebc4f487ada9916e83
MD5 2ad15aa49d8b3f627866c029cfeacce7
SHA1 68c34253e8f0c92f3bd6098c9e236aeddbb9b148
SHA512 bcd346b759930b9920fe518e0e18e1a3bb110075070b69684ac4555b14ec8317f448db6b0e778fe32a2973ef243020ec354469997651d50f87890e3676b500e1
SSDEEP 24576:Xm4YhCg+Nns134tuQBHzPL2Wwfu09JlhcvfiHvjSs1sSQ7:tYhCxnTwQWmuJluXwWM87
TLSH
T1A4756D03F69581E8C49DC478C3569633AA32B8CD463576EF2BD40B213E2AFA16F1D716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-15_2ad15aa49d8b3f627866c029cfeacce7_akira_glassworm_rusty-stealer

File Explorer

2026-04-15_2ad15aa49d8b3f627866c029cfeacce7_akira_glassworm_rusty-stealer

.exe 1.6MB

2026-04-15_2ad15aa49d8b3f627866c029cfeacce7_akira_glassworm_rusty-stealer

IMPHASH e905a343f4d21a0bb35fc7c6cb8dbdb3
SHA256 723cd1c1ea377887bc5de7349849b49aff255efcef589eebc4f487ada9916e83
MD5 2ad15aa49d8b3f627866c029cfeacce7
SHA1 68c34253e8f0c92f3bd6098c9e236aeddbb9b148
SHA512 bcd346b759930b9920fe518e0e18e1a3bb110075070b69684ac4555b14ec8317f448db6b0e778fe32a2973ef243020ec354469997651d50f87890e3676b500e1
SSDEEP 24576:Xm4YhCg+Nns134tuQBHzPL2Wwfu09JlhcvfiHvjSs1sSQ7:tYhCxnTwQWmuJluXwWM87
TLSH
T1A4756D03F69581E8C49DC478C3569633AA32B8CD463576EF2BD40B213E2AFA16F1D716
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1168520

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

client.pdb

kernel32

GetProcessHeap HeapAlloc HeapFree CloseHandle GetSystemTimePreciseAsFileTime GetModuleHandleA SwitchToThread GetLastError FindClose LoadLibraryA GetProcAddress GetCurrentProcess FindFirstVolumeW FindNextVolumeW FindVolumeClose GetVolumePathNamesForVolumeNameW GetDriveTypeW GetVolumeInformationW GetConsoleWindow SetFilePointerEx WaitForSingleObject CreateToolhelp32Snapshot Thread32First OpenThread ResumeThread Thread32Next SuspendThread GetFileInformationByHandleEx SetFileInformationByHandle Beep CreateMutexW WriteFileEx SleepEx GetExitCodeProcess AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread HeapReAlloc SetLastError GetFinalPathNameByHandleW GetQueuedCompletionStatusEx CreateIoCompletionPort SetFileCompletionNotificationModes LoadLibraryExA FormatMessageW FindFirstFileExW GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW GetEnvironmentVariableW GetFullPathNameW CreateFileW SetFileTime GetFileInformationByHandle GetModuleHandleW GetModuleFileNameW GetTempPathW SetHandleInformation DeleteFileW QueryPerformanceFrequency CreateThread ReadFileEx QueryPerformanceCounter CreateWaitableTimerExW SetWaitableTimer Sleep ExitProcess CreateEventW CancelIo GetOverlappedResult ReadFile GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle WaitForMultipleObjects FindNextFileW ReadProcessMemory VirtualQueryEx Process32FirstW Process32NextW GlobalMemoryStatusEx K32GetPerformanceInfo GetSystemInfo GetSystemTimes GetProcessIoCounters OpenProcess GetProcessTimes LocalFree GetDiskFreeSpaceExW DeviceIoControl GetComputerNameExW PostQueuedCompletionStatus SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent

oleaut32

SafeArrayUnaccessData SafeArrayAccessData SysAllocStringLen VariantClear SysStringLen SafeArrayDestroy SysFreeString GetErrorInfo

ntdll

RtlGetVersion NtDeviceIoControlFile NtWriteFile NtCreateNamedPipeFile NtCancelIoFileEx NtQueryInformationProcess NtOpenFile NtReadFile RtlNtStatusToDosError NtCreateFile

advapi32

CopySid GetLengthSid IsValidSid RegCloseKey GetTokenInformation OpenProcessToken RegQueryValueExW SystemFunction036 RegOpenKeyExW

mfplat

MFCreateSample MFShutdown MFCreateAttributes MFStartup

ole32

CoSetProxyBlanket CoCreateInstance CoInitializeEx CoUninitialize CoInitializeSecurity

mfreadwrite

MFCreateSourceReaderFromMediaSource

mf

MFEnumDeviceSources

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

shell32

CommandLineToArgvW Shell_NotifyIconW ShellExecuteW SHEmptyRecycleBinW

pdh

PdhRemoveCounter PdhEnumObjectsA PdhOpenQueryA PdhGetFormattedCounterValue PdhCollectQueryData PdhCloseQuery PdhAddEnglishCounterW

psapi

GetModuleFileNameExW GetProcessMemoryInfo

powrprof

CallNtPowerInformation

crypt32

CertVerifyTimeValidity CertEnumCertificatesInStore CertOpenStore CertFreeCertificateContext CertDuplicateCertificateContext CertGetEnhancedKeyUsage CertCloseStore

ws2_32

WSASocketW WSACleanup WSAStartup WSASend bind getsockname WSAIoctl getaddrinfo connect ioctlsocket socket closesocket WSAGetLastError setsockopt recv send getsockopt freeaddrinfo

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

user32

PostQuitMessage SystemParametersInfoA FindWindowA PostMessageA GetForegroundWindow FindWindowExA GetShellWindow ReleaseDC GetSystemMetrics GetDC mouse_event SetForegroundWindow GetDesktopWindow SendMessageA GetDlgItem SetCursorPos GetKeyState keybd_event MessageBoxW EnumDisplayMonitors SetProcessDPIAware GetWindowTextA DispatchMessageA TranslateMessage UpdateWindow ShowWindow CreateWindowExA RegisterClassA LoadCursorW LoadIconW DestroyWindow SendInput DefWindowProcA GetMessageA

gdi32

DeleteObject CreateCompatibleBitmap BitBlt SelectObject DeleteDC GetDIBits CreateCompatibleDC

vcruntime140

__C_specific_handler __current_exception __current_exception_context memset __CxxFrameHandler3 memcmp memcpy memmove

api-ms-win-crt-string-l1-1-0

strlen wcslen

api-ms-win-crt-math-l1-1-0

roundf exp2 __setusermatherr round pow

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _initialize_narrow_environment _c_exit _cexit _get_initial_narrow_environment _initialize_onexit_table __p___argv __p___argc _initterm _register_onexit_function _exit exit _seh_filter_exe _set_app_type terminate _crt_atexit _initterm_e _configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

409KB

Virtual Size

409KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.zzz

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-15_2ad15aa49d8b3f627866c029cfeacce7_akira_glassworm_rusty-stealer

kernel32

oleaut32

ntdll

advapi32

mfplat

ole32

mfreadwrite

mf

api-ms-win-core-synch-l1-2-0

shell32

pdh

psapi

powrprof

crypt32

ws2_32

bcryptprimitives

bcrypt

user32

gdi32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic