2026-06-05_b31886f5fdef5a3922c095dea79e33bf_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-05_b31886f5fdef5a3922c095dea79e33bf_akira_glassworm_rusty-stealer
Size 5.8MB
Sample260605-3pxncaft91
SHA256 7cddd3f93295e0d5f2bae7fa978efcfafa1415196f2acb40c92fe021c613d534
MD5 b31886f5fdef5a3922c095dea79e33bf
SHA1 4d079f43e20ac2088c597ca2a98561d5a0a562ec
SHA512 f41e47dfd4de7dbaae5f5696969d0db83f0814201515b2f84e07c6e5c266d1c564c59f1276cd7003d43a11222e6c7f4a6af8a82e48a88399a47c1f4120a5d3b0
SSDEEP 49152:Tzb6SumOPwCnD3evo3QChG5DhgCFEms4WNr22eGQ1ngKv/+Q2EDeS/rHyXiQJQxa:Bo3KDCCu4m05nxSPU8uoDw/z
TLSH
T1CD562815BA9BA8EDC199C874834A4A731E2170CB1B26B9FF44C446353FA9BB41F3D718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-05_b31886f5fdef5a3922c095dea79e33bf_akira_glassworm_rusty-stealer

File Explorer

2026-06-05_b31886f5fdef5a3922c095dea79e33bf_akira_glassworm_rusty-stealer

.exe 5.8MB

2026-06-05_b31886f5fdef5a3922c095dea79e33bf_akira_glassworm_rusty-stealer

IMPHASH 024d701bac50aab323c4417bc0b8af59
SHA256 7cddd3f93295e0d5f2bae7fa978efcfafa1415196f2acb40c92fe021c613d534
MD5 b31886f5fdef5a3922c095dea79e33bf
SHA1 4d079f43e20ac2088c597ca2a98561d5a0a562ec
SHA512 f41e47dfd4de7dbaae5f5696969d0db83f0814201515b2f84e07c6e5c266d1c564c59f1276cd7003d43a11222e6c7f4a6af8a82e48a88399a47c1f4120a5d3b0
SSDEEP 49152:Tzb6SumOPwCnD3evo3QChG5DhgCFEms4WNr22eGQ1ngKv/+Q2EDeS/rHyXiQJQxa:Bo3KDCCu4m05nxSPU8uoDw/z
TLSH
T1CD562815BA9BA8EDC199C874834A4A731E2170CB1B26B9FF44C446353FA9BB41F3D718
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4068448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

pet.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

bcryptprimitives

ProcessPrng

kernel32

GetEnvironmentVariableW GetModuleHandleA QueryPerformanceFrequency GetModuleHandleW FormatMessageW GetModuleFileNameW GetFileInformationByHandle GetCurrentThreadId GetFullPathNameW CreateFileW CreateDirectoryW FindFirstFileExW ReadConsoleW GetEnvironmentStringsW FindClose CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle CreateNamedPipeW CreateThread WriteFileEx SleepEx GetSystemTimeAsFileTime WaitForMultipleObjects GetOverlappedResult GetExitCodeProcess CreateEventW CancelIo ReadFile ExitProcess WriteConsoleW DeleteFileW GetFinalPathNameByHandleW GetFileType IsProcessorFeaturePresent TerminateProcess GetSystemTimePreciseAsFileTime SwitchToThread InitializeSListHead SetFileInformationByHandle IsDebuggerPresent GetFileInformationByHandleEx GetLastError QueryPerformanceCounter HeapReAlloc CloseHandle HeapFree GetProcessHeap GetConsoleOutputCP GetCurrentDirectoryW SetLastError WideCharToMultiByte RtlVirtualUnwind ReleaseMutex CreateMutexA GetCurrentProcessId lstrlenW GetCurrentProcess GetProcAddress LoadLibraryA WaitForSingleObjectEx RtlLookupFunctionEntry RtlCaptureContext GetSystemInfo FindNextFileW HeapAlloc GetCommandLineW AddVectoredExceptionHandler SetThreadStackGuarantee GetLongPathNameW WaitForSingleObject GetConsoleScreenBufferInfo SetConsoleTextAttribute SetConsoleMode MultiByteToWideChar GetConsoleMode GetStdHandle ReadFileEx GetCurrentThread FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter

ntdll

NtWriteFile RtlNtStatusToDosError NtOpenFile NtReadFile

advapi32

RegCloseKey RegEnumKeyExW RegOpenKeyExW RegQueryValueExW

vcruntime140

_CxxThrowException memcmp memmove __C_specific_handler memcpy __CxxFrameHandler3 __current_exception_context __current_exception memset

api-ms-win-crt-runtime-l1-1-0

_crt_atexit terminate _register_onexit_function _initialize_onexit_table _set_app_type _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _configure_narrow_argv _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Name

.text

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

134KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

592KB

Virtual Size

596KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-05_b31886f5fdef5a3922c095dea79e33bf_akira_glassworm_rusty-stealer

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

advapi32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic