2026-04-18_717b3a58cb9cc209d11cd4659d86c4e2_akira_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-18_717b3a58cb9cc209d11cd4659d86c4e2_akira_elex_glassworm
Size 609KB
Sample260418-3apdesfy21
SHA256 28c8170942d42d2db232bd0d2ed638f84e3eeb07dc9d548746808deff880b3b2
MD5 717b3a58cb9cc209d11cd4659d86c4e2
SHA1 ffd3cf732e1095fda925bad8776f1d7e215b0525
SHA512 6ecf38e46d3e792fda39728be01f4d13f7638b75908d0894bd23659f8eeb6e93e5257330fac770b56c7d316857fddd7212faf7b0a4f720f0d7642267a25ae010
SSDEEP 12288:wlRp9oGQ2hne8GmtBYEOU0Ahiei9uooHOy8A7hzBj+Fz:wlRpeGvheJmHYHU0sXi9+HOy8A7dYz
TLSH
T17CD46C09EBD271A6DE431173255FB33A56378C0587128EEBC7A48C20AE657F16C3B53A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-04-18_717b3a58cb9cc209d11cd4659d86c4e2_akira_elex_glassworm

.exe 609KB

2026-04-18_717b3a58cb9cc209d11cd4659d86c4e2_akira_elex_glassworm

IMPHASH 75cc4a4449f4095d63ee42cdc0daa7eb
SHA256 28c8170942d42d2db232bd0d2ed638f84e3eeb07dc9d548746808deff880b3b2
MD5 717b3a58cb9cc209d11cd4659d86c4e2
SHA1 ffd3cf732e1095fda925bad8776f1d7e215b0525
SHA512 6ecf38e46d3e792fda39728be01f4d13f7638b75908d0894bd23659f8eeb6e93e5257330fac770b56c7d316857fddd7212faf7b0a4f720f0d7642267a25ae010
SSDEEP 12288:wlRp9oGQ2hne8GmtBYEOU0Ahiei9uooHOy8A7hzBj+Fz:wlRpeGvheJmHYHU0sXi9+HOy8A7dYz
TLSH
T17CD46C09EBD271A6DE431173255FB33A56378C0587128EEBC7A48C20AE657F16C3B53A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

a8:74:32:6a:57:46:eb:e1:e9:84:92:9d:e8:68:61:16:66:1b:73:6f:26:77:9e:03:19:03:48:37:f7:a8:e2:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2025 - Jun 17, 2026

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:21:33:c0:35:fb:d2:0f:21:a4:00:01:00:00:02:21

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 19, 2026 - May 17, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

Major OS version

Entry point

434320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

inno_updater.pdb

kernel32

HeapReAlloc CreateWaitableTimerExW Sleep SetWaitableTimer WaitForSingleObject SwitchToThread OpenProcess K32GetModuleFileNameExW TerminateProcess GetModuleHandleW GetSystemTimeAsFileTime GetExitCodeProcess CreateFileW GetFileInformationByHandleEx GetCurrentThread Process32FirstW GetSystemTimePreciseAsFileTime GetFileType CreateToolhelp32Snapshot GetCurrentThreadId InitializeSListHead SetThreadStackGuarantee FormatMessageW GetCurrentDirectoryW GetCurrentProcess RtlCaptureContext GetProcAddress ReleaseMutex WaitForSingleObjectEx LoadLibraryA lstrlenW GetModuleFileNameW CreateMutexA WideCharToMultiByte MultiByteToWideChar GetEnvironmentVariableW GetModuleHandleA CreateThread ExitProcess QueryPerformanceCounter QueryPerformanceFrequency HeapAlloc HeapFree GetProcessHeap IsDebuggerPresent SetFileInformationByHandle AddVectoredExceptionHandler GetCommandLineW GetStdHandle GetConsoleScreenBufferInfo SetConsoleMode GetConsoleMode CreateFileA SetLastError GetLastError SetFilePointerEx CloseHandle FindClose GetConsoleOutputCP SetUnhandledExceptionFilter WriteConsoleW UnhandledExceptionFilter FillConsoleOutputAttribute FillConsoleOutputCharacterW SetConsoleCursorPosition SetConsoleTextAttribute MoveFileExW FindFirstFileExW GetCurrentProcessId FindNextFileW GetFullPathNameW GetFileInformationByHandle Process32NextW GetTempPathW GetTimeZoneInformationForYear IsProcessorFeaturePresent

ntdll

NtWriteFile RtlNtStatusToDosError NtReadFile NtOpenFile

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

bcryptprimitives

ProcessPrng

user32

SetWindowPos GetDesktopWindow GetWindowRect ShutdownBlockReasonCreate MessageBoxW ShutdownBlockReasonDestroy SetDlgItemTextW EndDialog DialogBoxParamW PostThreadMessageW SendMessageW SendDlgItemMessageW

userenv

GetUserProfileDirectoryW

vcruntime140

memset memcpy memmove _except_handler4_common __current_exception_context __current_exception __CxxFrameHandler3 memcmp

api-ms-win-crt-runtime-l1-1-0

__p___argv __p___argc _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _cexit _set_app_type _seh_filter_exe _initialize_onexit_table _register_onexit_function _crt_atexit _controlfp_s terminate _register_thread_local_exe_atexit_callback _c_exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-18_717b3a58cb9cc209d11cd4659d86c4e2_akira_elex_glassworm

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

bcryptprimitives

user32

userenv

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic