2026-06-25_115d07e35167acf8ea81f70a0b04c6cc_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-25_115d07e35167acf8ea81f70a0b04c6cc_akira_glassworm_rusty-stealer
Size 2.4MB
Sample260630-ac7cssbt5p
SHA256 b9533e515ed293192385daac25d79e43b02614d6beb55fccc2ec4f6ca0cbcaa3
MD5 115d07e35167acf8ea81f70a0b04c6cc
SHA1 81d254e13b2730a60db73e57a68d5c230714c1af
SHA512 0f076312b9476261960ef4d596c06e7197c842841e8cc019575bb7fc098fcd2cc264c6af97fdd5c742c239cf7849915c3c96a2612a04cd73a9c59fa0b8b191c2
SSDEEP 49152:DLdnZPcSsoo9NWl5i9CNUVXlJJr7sAf09kfcfOWDAOsM/ci7dcYIU6itO:DLdnZNulJJruizn+t
TLSH
T102B56C02BA4A55ECD199C8B4C34B8A739B7534CB0B35B9FF11D546253FAAAB41F2C309
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-25_115d07e35167acf8ea81f70a0b04c6cc_akira_glassworm_rusty-stealer

File Explorer

2026-06-25_115d07e35167acf8ea81f70a0b04c6cc_akira_glassworm_rusty-stealer

.exe 2.4MB

2026-06-25_115d07e35167acf8ea81f70a0b04c6cc_akira_glassworm_rusty-stealer

IMPHASH 106cfde33b31d8d6dc7be82ac2b9e3a3
SHA256 b9533e515ed293192385daac25d79e43b02614d6beb55fccc2ec4f6ca0cbcaa3
MD5 115d07e35167acf8ea81f70a0b04c6cc
SHA1 81d254e13b2730a60db73e57a68d5c230714c1af
SHA512 0f076312b9476261960ef4d596c06e7197c842841e8cc019575bb7fc098fcd2cc264c6af97fdd5c742c239cf7849915c3c96a2612a04cd73a9c59fa0b8b191c2
SSDEEP 49152:DLdnZPcSsoo9NWl5i9CNUVXlJJr7sAf09kfcfOWDAOsM/ci7dcYIU6itO:DLdnZNulJJruizn+t
TLSH
T102B56C02BA4A55ECD199C8B4C34B8A739B7534CB0B35B9FF11D546253FAAAB41F2C309
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1676804

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

syshost.pdb

crypt32

CertDuplicateStore CertDuplicateCertificateChain CertGetCertificateChain CertOpenStore CertCloseStore CertVerifyCertificateChainPolicy CertEnumCertificatesInStore CertDuplicateCertificateContext CertAddCertificateContextToStore CertFreeCertificateContext CertFreeCertificateChain

secur32

AcceptSecurityContext FreeContextBuffer InitializeSecurityContextW AcquireCredentialsHandleA QueryContextAttributesW EncryptMessage FreeCredentialsHandle DecryptMessage DeleteSecurityContext

kernel32

GetModuleHandleW LoadLibraryExW DuplicateHandle GetModuleFileNameW GetWindowsDirectoryW FreeLibrary GetLastError GetProcAddress HeapFree SetLastError GetComputerNameExW GetModuleHandleA SetHandleInformation HeapAlloc GetSystemTimeAsFileTime GetProcessHeap CloseHandle LoadLibraryA GetSystemTimePreciseAsFileTime GetSystemDirectoryW HeapReAlloc TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter FindNextFileW Sleep SetWaitableTimer CreateWaitableTimerExW MoveFileExW CopyFileExW SwitchToThread DeleteFileW GetTempPathW WaitForMultipleObjects GetFileAttributesW CreateProcessW CompareStringOrdinal FreeEnvironmentStringsW GetEnvironmentStringsW ReadFile GetOverlappedResult CancelIo CreateEventW ExitProcess CreateDirectoryW GetFileInformationByHandleEx IsProcessorFeaturePresent FindFirstFileExW SetFileInformationByHandle SetFileTime CreateFileW GetFullPathNameW CreateThread QueryPerformanceCounter FormatMessageW QueryPerformanceFrequency WriteFileEx SleepEx ReadFileEx GetEnvironmentVariableW WriteConsoleW MultiByteToWideChar WaitForSingleObject GetConsoleOutputCP GetConsoleMode GetStdHandle RtlVirtualUnwind WideCharToMultiByte ReleaseMutex CreateMutexA GetCurrentProcessId lstrlenW WaitForSingleObjectEx InitializeSListHead GetFileInformationByHandle GetExitCodeProcess SetThreadExecutionState FindClose OpenProcess QueryFullProcessImageNameW IsDebuggerPresent GetCurrentProcess CreateMutexW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry

advapi32

SystemFunction036 GetTokenInformation OpenProcessToken GetUserNameW

bcrypt

BCryptGenRandom

bcryptprimitives

ProcessPrng

ntdll

RtlNtStatusToDosError NtWriteFile NtCreateNamedPipeFile NtSuspendProcess NtResumeProcess NtReadFile NtOpenFile

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

user32

GetAsyncKeyState GetForegroundWindow GetWindowTextW GetSystemMetrics SetCursorPos BlockInput mouse_event GetDC keybd_event

ws2_32

WSAGetLastError getsockname ioctlsocket connect getsockopt closesocket recv WSARecv getpeername getaddrinfo freeaddrinfo send WSASend WSADuplicateSocketW setsockopt select WSACleanup WSAStartup WSASocketW

gdi32

BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC DeleteObject DeleteDC GetDIBits

vcruntime140

memcpy __current_exception_context __current_exception memcmp __CxxFrameHandler3 memset memmove _CxxThrowException __C_specific_handler

api-ms-win-crt-math-l1-1-0

__setusermatherr roundf

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode free

api-ms-win-crt-utility-l1-1-0

_rotl64

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _register_onexit_function terminate _register_thread_local_exe_atexit_callback _c_exit _cexit _crt_atexit __p___argc _set_app_type _initialize_onexit_table _exit exit _configure_narrow_argv _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment __p___argv

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-25_115d07e35167acf8ea81f70a0b04c6cc_akira_glassworm_rusty-stealer

crypt32

secur32

kernel32

advapi32

bcrypt

bcryptprimitives

ntdll

api-ms-win-core-synch-l1-2-0

user32

ws2_32

gdi32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic