2026-07-06_a5380d2f55c42bd950d4c0ce3714f8ca_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_a5380d2f55c42bd950d4c0ce3714f8ca_akira_glassworm_rusty-stealer
Size 7.6MB
Sample260707-b8mhyafw21
SHA256 7090f01ba8edf9ab9800b3ed11ed95e89eb9bdcd2094e61996080e371b785eaf
MD5 a5380d2f55c42bd950d4c0ce3714f8ca
SHA1 9b2fe4d6f32ccf5e4345acf4d50da6137c8c84ea
SHA512 2e4854bd8b99af5d42f84a74bfeb3a612553ab7674458e4d0652a34dada909c9f25bd742f2408db26b3657367ce8c175fdb05ca63acbdd119fb90cfe010ca585
SSDEEP 98304:S4I+irn0njwaxr6LZ8V1DUFk1tQlusoA8PC6t+DZf1q7cIA46w1+n+:xE8/5PCYkzq73ADGk
TLSH
T1CA866C07E29480E9C0AEC0B8C31B9A37EB72B8895535F29F5BE44B512F26F506F1D719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_SQLQuery_ConfidentialDataStore

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-07-06_a5380d2f55c42bd950d4c0ce3714f8ca_akira_glassworm_rusty-stealer

File Explorer

2026-07-06_a5380d2f55c42bd950d4c0ce3714f8ca_akira_glassworm_rusty-stealer

.exe 7.6MB

2026-07-06_a5380d2f55c42bd950d4c0ce3714f8ca_akira_glassworm_rusty-stealer

IMPHASH 5da8941fcd5ef825ee28aaed8905c00d
SHA256 7090f01ba8edf9ab9800b3ed11ed95e89eb9bdcd2094e61996080e371b785eaf
MD5 a5380d2f55c42bd950d4c0ce3714f8ca
SHA1 9b2fe4d6f32ccf5e4345acf4d50da6137c8c84ea
SHA512 2e4854bd8b99af5d42f84a74bfeb3a612553ab7674458e4d0652a34dada909c9f25bd742f2408db26b3657367ce8c175fdb05ca63acbdd119fb90cfe010ca585
SSDEEP 98304:S4I+irn0njwaxr6LZ8V1DUFk1tQlusoA8PC6t+DZf1q7cIA46w1+n+:xE8/5PCYkzq73ADGk
TLSH
T1CA866C07E29480E9C0AEC0B8C31B9A37EB72B8895535F29F5BE44B512F26F506F1D719
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Detects executables containing SQL queries to confidential data stores. Observed in infostealers
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

68:b7:57:f7:d0:29:44:3a:a3:9d:c9:c6:7d:a2:00:04:60:20:e4:f4:23:89:d1:27:06:2b:0f:3b:5c:c9:1c:2a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Precision Quality

Chains

Jul 2, 2026

CN=Precision Quality

Subject

CN=Precision Quality

Serial Number

13:56:a4:45:14:16:df:af:4d:a5:f4:b9:9e:a9:6b:1a

Issuer

CN=Precision Quality

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 21, 2026 - Jun 21, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

5805936

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

daily_huddle.pdb

ntdll

NtCancelIoFileEx NtCreateNamedPipeFile RtlNtStatusToDosError NtCreateFile NtWriteFile NtDeviceIoControlFile NtReadFile NtOpenFile RtlGetVersion

kernel32

IsProcessorFeaturePresent OpenProcess WakeAllConditionVariable GetCurrentThreadId LoadLibraryW SleepConditionVariableSRW GetModuleHandleA IsDebuggerPresent RtlLookupFunctionEntry SetLastError WaitForSingleObjectEx WideCharToMultiByte ReleaseMutex MultiByteToWideChar SetWaitableTimer FormatMessageW AcquireSRWLockExclusive GetModuleFileNameW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW DuplicateHandle SleepEx ExitProcess GetSystemTimePreciseAsFileTime HeapAlloc SetHandleInformation LCIDToLocaleName GetUserDefaultUILanguage RtlPcToFileHeader EncodePointer TlsAlloc TlsGetValue TlsSetValue GetSystemInfo GetCurrentProcess LocalFree GetCurrentProcessId CloseHandle RtlUnwindEx DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SystemTimeToFileTime ReleaseSRWLockExclusive QueryPerformanceCounter FreeEnvironmentStringsW GetEnvironmentStringsW TerminateProcess QueryPerformanceFrequency GetEnvironmentVariableW GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext WaitForSingleObject SetEnvironmentVariableW AddVectoredExceptionHandler TlsFree GetModuleHandleW GlobalSize GlobalLock CreateFileMappingW GlobalAlloc LoadLibraryA GetProcAddress Process32NextW Process32FirstW CreateToolhelp32Snapshot GlobalUnlock OpenMutexW CreateEventA AreFileApisANSI ReadFile WriteFile GetDiskFreeSpaceW LockFile SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathA GetDiskFreeSpaceA GetExitCodeProcess GetFileAttributesA GetFileAttributesExW OpenEventW CreateFileA DeleteFileA UnlockFile LockFileEx GetFileSize FlushFileBuffers LoadLibraryExA PostQueuedCompletionStatus CopyFileExW DeleteFileW WriteFileEx GetTickCount MapViewOfFile FormatMessageA GetSystemTime GetSystemTimeAsFileTime FreeLibrary HeapDestroy HeapCompact FlushViewOfFile OutputDebugStringW HeapSize HeapValidate InitializeCriticalSectionAndSpinCount OutputDebugStringA HeapCreate RaiseException LoadLibraryExW GetLastError HeapReAlloc ReadFileEx CreateThread UnhandledExceptionFilter SetEvent GetFileAttributesW CreateProcessW lstrlenW FindFirstFileExW CreateDirectoryW GetCommandLineW SetUnhandledExceptionFilter SwitchToThread Sleep SetFilePointerEx FindNextFileW FindClose HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee InitializeSListHead GetFinalPathNameByHandleW CreateEventW SetFileInformationByHandle CreateFileW GetFullPathNameW GetFileInformationByHandleEx GetFileInformationByHandle GetTempPathW CreateWaitableTimerExW UnmapViewOfFile CreateMutexW WriteConsoleW GetQueuedCompletionStatusEx GetConsoleOutputCP GetConsoleMode CreateIoCompletionPort SetFileCompletionNotificationModes GetStdHandle CreateMutexA

user32

GetTouchInputInfo ScreenToClient TrackMouseEvent SystemParametersInfoW FlashWindowEx LoadCursorW SetCursor IsIconic GetParent RegisterTouchWindow SetWindowLongPtrW IsWindow KillTimer SetTimer CloseTouchInputHandle GetWindow SetCursorPos UpdateWindow SetWindowRgn GetForegroundWindow IsWindowEnabled SetWindowTextW IsWindowVisible GetWindowTextW SetFocus GetWindowTextLengthW EnableWindow SetParent ShowCursor ClipCursor GetClipCursor MonitorFromRect EnumChildWindows EnumDisplayMonitors GetKeyState ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW GetKeyboardState InvalidateRect ReleaseCapture SetCapture SetWindowLongW GetSystemMenu GetMonitorInfoW SetWindowPlacement ChangeDisplaySettingsExW SetPropW GetSystemMetrics GetWindowPlacement RegisterRawInputDevices DispatchMessageA TranslateMessage GetMessageA AdjustWindowRectEx GetMenu GetWindowLongW InvalidateRgn RegisterWindowMessageA IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos EnableMenuItem CreateIcon CreatePopupMenu CreateMenu AppendMenuW InsertMenuW DrawIconEx GetDC VkKeyScanW SetMenuItemInfoW SendInput CheckMenuItem DrawTextW ReleaseDC FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo ShowWindow SystemParametersInfoA GetActiveWindow DrawMenuBar CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu SetMenu RemoveMenu SetWindowPos FindWindowExW MessageBoxW CreateWindowExW RegisterClassExW PostMessageW GetWindowLongPtrW RedrawWindow AdjustWindowRect SetProcessDpiAwarenessContext DestroyWindow TranslateAcceleratorW GetMenuItemInfoW ChangeWindowMessageFilterEx SetWindowDisplayAffinity SendMessageW MonitorFromPoint CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard SetClipboardData EmptyClipboard DefWindowProcW PostQuitMessage RemoveClipboardFormatListener CallNextHookEx GetAsyncKeyState UnhookWindowsHookEx AddClipboardFormatListener RegisterClassW SetWindowsHookExW RegisterClipboardFormatW MsgWaitForMultipleObjectsEx DispatchMessageW MapVirtualKeyW GetUpdateRect PeekMessageW PostThreadMessageW ValidateRect GetRawInputData GetMessageW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

comctl32

SetWindowSubclass TaskDialogIndirect DefSubclassProc RemoveWindowSubclass

ole32

CoCreateFreeThreadedMarshaler RegisterDragDrop RevokeDragDrop CoTaskMemFree CoTaskMemAlloc OleInitialize CoSetProxyBlanket CoCreateInstance CoUninitialize CoInitializeEx

shlwapi

SHCreateMemStream

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

shell32

SHGetKnownFolderPath DragFinish Shell_NotifyIconGetRect SHAppBarMessage Shell_NotifyIconW ShellExecuteExW DragQueryFileW ShellExecuteW

oleaut32

SysAllocStringByteLen SysAllocStringLen SetErrorInfo SysStringLen GetErrorInfo SysFreeString SysStringByteLen

gdi32

CreateCompatibleDC CombineRgn CreateDIBSection SelectObject SetTextColor DeleteDC SetBkMode BitBlt DeleteObject GetDeviceCaps CreateRectRgn CreateSolidBrush

advapi32

GetTokenInformation ImpersonateLoggedOnUser DuplicateTokenEx AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegQueryValueExW RegOpenKeyExW SystemFunction036 EventRegister EventSetInformation RegGetValueW EventWriteTransfer EventUnregister RevertToSelf

bcryptprimitives

ProcessPrng

ws2_32

send recv getsockname connect freeaddrinfo WSACleanup WSAStartup getaddrinfo closesocket recvfrom getsockopt WSAGetLastError setsockopt WSASocketW ioctlsocket bind WSAIoctl sendto WSASend

crypt32

CryptUnprotectData CryptProtectData

ncrypt

NCryptFreeObject NCryptOpenKey NCryptOpenStorageProvider NCryptDecrypt

d3d11

D3D11CreateDevice

bcrypt

BCryptGenRandom

iphlpapi

GetAdaptersAddresses

api-ms-win-crt-string-l1-1-0

strncmp strcspn strcmp wcscmp strspn strncpy_s wcslen strlen strcpy_s wcsncmp _wcsicmp

api-ms-win-crt-math-l1-1-0

floorf floor ceil log round __setusermatherr roundf fabs sqrtf log10 _dclass trunc pow

api-ms-win-crt-heap-l1-1-0

realloc _msize malloc _callnewh calloc _set_new_mode free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_exit _initterm_e __p___argc __p___argv _initterm _seh_filter_exe _cexit _c_exit _get_initial_narrow_environment _register_thread_local_exe_atexit_callback abort terminate _crt_atexit _initialize_narrow_environment _configure_narrow_argv _beginthreadex _register_onexit_function _initialize_onexit_table _wassert _set_app_type _endthreadex exit

api-ms-win-crt-convert-l1-1-0

wcstol _ultow_s _wtoi

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vsnprintf_s __acrt_iob_func __p__commode __stdio_common_vfprintf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_a5380d2f55c42bd950d4c0ce3714f8ca_akira_glassworm_rusty-stealer

PE Signature issue

ntdll

kernel32

user32

api-ms-win-core-synch-l1-2-0

comctl32

ole32

shlwapi

dwmapi

shell32

oleaut32

gdi32

advapi32

bcryptprimitives

ws2_32

crypt32

ncrypt

d3d11

bcrypt

iphlpapi

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic