2026-07-05_1a7a87e5868a4fe98396999f9e83e19a_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_1a7a87e5868a4fe98396999f9e83e19a_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc
Size 6.6MB
Sample260705-b99d4agv2x
SHA256 85e838779a12379d0fd502f65a3a8e88af3f03ef5228e8c9751578ab3233293f
MD5 1a7a87e5868a4fe98396999f9e83e19a
SHA1 5c834ce3560b6d1b0607ad87bd03ee650c5f13cc
SHA512 e43a0a4605dd38f438b676ed4180fe8738ad7cc43c6d7fef4797850e716534b61e90aec3d5b2f28f8441fae4e0a8762edc6d645aee84b23aea475d50ef6cf6eb
SSDEEP 98304:7lcqDNywUz2n+JLUGvq4ZWVEPwwKSUG5JVB:mdwQ8sHxQVShUG5p
TLSH
T1AC66AF17F7A400F8D4A6C178CA57962AE772BC4A4730A7DF17905A5A1F23BE08E3D721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_1a7a87e5868a4fe98396999f9e83e19a_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc

File Explorer

2026-07-05_1a7a87e5868a4fe98396999f9e83e19a_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc

.exe 6.6MB

2026-07-05_1a7a87e5868a4fe98396999f9e83e19a_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc

IMPHASH cd2621734440eeef945588fdb846ce85
SHA256 85e838779a12379d0fd502f65a3a8e88af3f03ef5228e8c9751578ab3233293f
MD5 1a7a87e5868a4fe98396999f9e83e19a
SHA1 5c834ce3560b6d1b0607ad87bd03ee650c5f13cc
SHA512 e43a0a4605dd38f438b676ed4180fe8738ad7cc43c6d7fef4797850e716534b61e90aec3d5b2f28f8441fae4e0a8762edc6d645aee84b23aea475d50ef6cf6eb
SSDEEP 98304:7lcqDNywUz2n+JLUGvq4ZWVEPwwKSUG5JVB:mdwQ8sHxQVShUG5p
TLSH
T1AC66AF17F7A400F8D4A6C178CA57962AE772BC4A4730A7DF17905A5A1F23BE08E3D721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1610224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\o_installer\Build\x64\UnicodeRelease\SamanDownloader\SamanDownloader.pdb

kernel32

GetFileInformationByHandle GetModuleHandleA GetStdHandle HeapFree HeapAlloc GetProcessHeap GetFinalPathNameByHandleW K32GetModuleFileNameExW GetEnvironmentVariableW GetDiskFreeSpaceExW VerSetConditionMask VerifyVersionInfoW DuplicateHandle GetUserDefaultUILanguage SetDllDirectoryW GetExitCodeProcess FlushFileBuffers LoadLibraryExA VirtualQuery GetSystemInfo GetSystemDirectoryW SetEnvironmentVariableW GetOEMCP IsValidCodePage HeapSize ReadConsoleW SetFilePointerEx GetFileSizeEx EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType SetStdHandle GetTimeZoneInformation GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread GetCommandLineW GetCommandLineA TlsFree TlsSetValue TlsGetValue TlsAlloc RtlPcToFileHeader RtlUnwindEx CancelIo SetFileAttributesW WriteFileEx ReadFileEx GetCurrentThread SetThreadStackGuarantee CreateThread FreeEnvironmentStringsW GetEnvironmentStringsW CompareStringOrdinal SetHandleInformation FindFirstFileExW GetFullPathNameW SetWaitableTimer CreateWaitableTimerExW WriteConsoleW GetConsoleOutputCP GetConsoleMode ReleaseMutex CreateMutexA LoadLibraryA HeapReAlloc GetOverlappedResult GetSystemTimePreciseAsFileTime InitializeSListHead GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RaiseException OutputDebugStringW IsDebuggerPresent GetCPInfo GetFileInformationByHandleEx GetTickCount64 GetSystemTimeAsFileTime SetFileInformationByHandle QueryPerformanceFrequency QueryPerformanceCounter LCMapStringEx EncodePointer LeaveCriticalSection EnterCriticalSection GetExitCodeThread SwitchToThread WaitForSingleObjectEx TryAcquireSRWLockExclusive AcquireSRWLockExclusive SetLastError SetEndOfFile FreeLibrary lstrcmpiW lstrcpyW lstrcpynW GlobalAlloc LockResource SizeofResource FreeResource LoadResource FindResourceW SystemTimeToFileTime LocalFileTimeToFileTime GetFileAttributesW SetFileTime LocalFree FormatMessageW InitializeCriticalSectionAndSpinCount ExitProcess GlobalUnlock GlobalLock CreateDirectoryW lstrlenW GetTickCount WideCharToMultiByte GetCurrentDirectoryW GetProcAddress LoadLibraryW GetACP LoadLibraryExW GetLocalTime GetCurrentThreadId WriteFile GetCurrentProcessId GetFileSize MultiByteToWideChar GetVersionExW CreateFileW FindClose SetFilePointer FindNextFileW FindFirstFileW ReadFile MoveFileW CreateProcessW MoveFileExW CloseHandle Process32FirstW DeleteFileW TerminateThread GetWindowsDirectoryW Process32NextW CreateToolhelp32Snapshot OpenProcess WaitForSingleObject WaitForMultipleObjects CopyFileW GetModuleHandleW SetEvent CreateEventW GetModuleFileNameW MulDiv DeleteCriticalSection DecodePointer GetLastError Sleep InitializeCriticalSectionEx CreateMutexW ReleaseSRWLockExclusive SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable GetStringTypeW RemoveDirectoryW TerminateProcess GetCurrentProcess SleepEx RtlUnwind GetTimeZoneInformationForYear

user32

OffsetRect UnionRect GetWindowRect SendMessageW SetCursor LoadCursorW MonitorFromWindow GetDC ReleaseDC RegisterWindowMessageW ScreenToClient GetKeyState CharNextW DestroyWindow GetClientRect SetWindowPos GetWindowLongW SetWindowLongW IsIconic GetActiveWindow SetWindowTextW SetTimer KillTimer SetForegroundWindow InflateRect GetWindow PostQuitMessage EnumChildWindows GetWindowThreadProcessId GetShellWindow EnumWindows CharUpperW GetKeyNameTextW GetKeyboardLayout MapVirtualKeyExW DrawTextA GetGUIThreadInfo CreateAcceleratorTableW InvalidateRgn GetWindowTextW GetWindowTextLengthW EqualRect UpdateWindow IsWindowEnabled DestroyMenu TrackPopupMenu EnableMenuItem AppendMenuW CreatePopupMenu GetCaretBlinkTime ClientToScreen SetCaretPos GetCaretPos HideCaret ShowCaret CreateCaret CharPrevW SetRect DrawTextW FillRect GetWindowRgn UpdateLayeredWindow GetMenu AdjustWindowRectEx GetPropW SetPropW CallWindowProcW GetWindowLongPtrW RegisterClassExW GetClassInfoExW RegisterClassW EnableWindow ShowWindow SetWindowLongPtrW DefWindowProcW MessageBoxW SetWindowRgn MoveWindow LoadImageW GetParent PostMessageW SetCapture GetFocus IsZoomed DispatchMessageW TranslateMessage GetMessageW InvalidateRect GetSysColor ReleaseCapture PtInRect GetCursorPos CreateWindowExW GetMonitorInfoW MapWindowPoints IntersectRect IsWindowVisible IsWindow IsRectEmpty GetUpdateRect EndPaint BeginPaint SetFocus

gdi32

GetBitmapBits GetTextExtentPointA CreatePatternBrush EnumFontFamiliesExW GdiFlush TextOutW GetTextExtentPoint32W GetCharABCWidthsW SetBkColor SetTextColor SetBkMode GetObjectA LineTo MoveToEx CreatePenIndirect CreateSolidBrush SetStretchBltMode SetBitmapBits StretchBlt CombineRgn ExtSelectClipRgn CreateRectRgnIndirect GetClipBox SelectClipRgn PtInRegion CreateDIBSection CreateRoundRectRgn PlayEnhMetaFile CreateCompatibleBitmap GetEnhMetaFileHeader CreateDIBitmap AddFontMemResourceEx GetTextMetricsW CloseEnhMetaFile CreateEnhMetaFileW SetWindowOrgEx Rectangle RestoreDC BitBlt SaveDC SelectObject CreateCompatibleDC DeleteDC RemoveFontMemResourceEx DeleteObject CreatePen CreateFontIndirectW GetStockObject GetObjectW GetDeviceCaps CreateRectRgn GetCurrentObject

advapi32

SystemFunction036 RegLoadKeyW OpenProcessToken RegEnumKeyExW RegQueryInfoKeyW GetUserNameW AllocateAndInitializeSid RegSetValueExW FreeSid CheckTokenMembership DuplicateTokenEx LookupPrivilegeValueW AdjustTokenPrivileges RegCloseKey RegOpenKeyExW

shell32

SHGetSpecialFolderPathW SHGetSpecialFolderLocation SHChangeNotify DragQueryFileW ShellExecuteW SHGetPathFromIDListW SHBrowseForFolderW SHCreateDirectoryExW

ole32

OleDuplicateData CoCreateInstance CoInitializeSecurity CoTaskMemFree CoUninitialize CoTaskMemAlloc CoInitialize CLSIDFromProgID CLSIDFromString OleLockRunning CreateStreamOnHGlobal ReleaseStgMedium RegisterDragDrop DoDragDrop

oleaut32

VariantClear VariantInit SysAllocString SysFreeString

comctl32

_TrackMouseEvent InitCommonControlsEx ord17

shlwapi

PathFindFileNameW PathIsDirectoryW PathFileExistsW PathFindExtensionW SHGetValueW SHSetValueW SHDeleteKeyW

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

bcryptprimitives

ProcessPrng

ntdll

RtlCaptureContext RtlVirtualUnwind NtWriteFile NtReadFile RtlNtStatusToDosError NtOpenFile NtCreateNamedPipeFile RtlLookupFunctionEntry

cJSON_AddArrayToObject cJSON_AddBoolToObject cJSON_AddFalseToObject cJSON_AddItemReferenceToArray cJSON_AddItemReferenceToObject cJSON_AddItemToArray cJSON_AddItemToObject cJSON_AddItemToObjectCS cJSON_AddNullToObject cJSON_AddNumberToObject cJSON_AddObjectToObject cJSON_AddRawToObject cJSON_AddStringToObject cJSON_AddTrueToObject cJSON_Compare cJSON_CreateArray cJSON_CreateArrayReference cJSON_CreateBool cJSON_CreateDoubleArray cJSON_CreateFalse cJSON_CreateFloatArray cJSON_CreateIntArray cJSON_CreateNull cJSON_CreateNumber cJSON_CreateObject cJSON_CreateObjectReference cJSON_CreateRaw cJSON_CreateString cJSON_CreateStringArray cJSON_CreateStringReference cJSON_CreateTrue cJSON_Delete cJSON_DeleteItemFromArray cJSON_DeleteItemFromObject cJSON_DeleteItemFromObjectCaseSensitive cJSON_DetachItemFromArray cJSON_DetachItemFromObject cJSON_DetachItemFromObjectCaseSensitive cJSON_DetachItemViaPointer cJSON_Duplicate cJSON_GetArrayItem cJSON_GetArraySize cJSON_GetErrorPtr cJSON_GetObjectItem cJSON_GetObjectItemCaseSensitive cJSON_GetStringValue cJSON_HasObjectItem cJSON_InitHooks cJSON_InsertItemInArray cJSON_IsArray cJSON_IsBool cJSON_IsFalse cJSON_IsInvalid cJSON_IsNull cJSON_IsNumber cJSON_IsObject cJSON_IsRaw cJSON_IsString cJSON_IsTrue cJSON_Minify cJSON_Parse cJSON_ParseWithOpts cJSON_Print cJSON_PrintBuffered cJSON_PrintPreallocated cJSON_PrintUnformatted cJSON_ReplaceItemInArray cJSON_ReplaceItemInObject cJSON_ReplaceItemInObjectCaseSensitive cJSON_ReplaceItemViaPointer cJSON_SetNumberHelper cJSON_Version cJSON_free cJSON_malloc

Name

.text

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

914KB

Virtual Size

914KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

70KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

1024B

Virtual Size

784B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3.8MB

Virtual Size

3.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_1a7a87e5868a4fe98396999f9e83e19a_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

generic