2026-07-06_7a7e8fb79afd238232266703ae0645a6_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_7a7e8fb79afd238232266703ae0645a6_akira_glassworm_rusty-stealer
Size 9.9MB
Sample260707-dbcctagv2t
SHA256 2711be06cdabfdc8845ea2b890e079f589a3cbc64a5255400c5379b14a933804
MD5 7a7e8fb79afd238232266703ae0645a6
SHA1 079209a24d3ef89d7107f503c70de8eef93c0425
SHA512 ddd9e1097ea8e661aa41e6fb27545ec84810b37ce8dc37eae37acffb06bd6e6597dfcb15097af5ac1e454bad76d976e263f2858862613cfd38105749b14afad8
SSDEEP 98304:FODLNc5+zAcVyfDWgDcShLCKVCu3+wGm73z2wCj4yuMIUQ8W:ALN8+zAcVyfD7bJ3FZyuh
TLSH
T1E3A628253A9BA8ACC15AC470834A8A721A3934CB1B35BDFF48D496753F68DB55F3C318
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_7a7e8fb79afd238232266703ae0645a6_akira_glassworm_rusty-stealer

File Explorer

2026-07-06_7a7e8fb79afd238232266703ae0645a6_akira_glassworm_rusty-stealer

.exe 9.9MB

2026-07-06_7a7e8fb79afd238232266703ae0645a6_akira_glassworm_rusty-stealer

IMPHASH e23d4010c4dabe91ec492f32afc80297
SHA256 2711be06cdabfdc8845ea2b890e079f589a3cbc64a5255400c5379b14a933804
MD5 7a7e8fb79afd238232266703ae0645a6
SHA1 079209a24d3ef89d7107f503c70de8eef93c0425
SHA512 ddd9e1097ea8e661aa41e6fb27545ec84810b37ce8dc37eae37acffb06bd6e6597dfcb15097af5ac1e454bad76d976e263f2858862613cfd38105749b14afad8
SSDEEP 98304:FODLNc5+zAcVyfDWgDcShLCKVCu3+wGm73z2wCj4yuMIUQ8W:ALN8+zAcVyfD7bJ3FZyuh
TLSH
T1E3A628253A9BA8ACC15AC470834A8A721A3934CB1B35BDFF48D496753F68DB55F3C318
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6684304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

testing_conventions.pdb

kernel32

CloseHandle SetConsoleMode GetConsoleScreenBufferInfo SetConsoleTextAttribute GetConsoleMode WaitForMultipleObjects SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime FindNextFileW GetTempPathW GetModuleHandleA CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId MoveFileExW SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess GetStdHandle CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW SetFileAttributesW FindFirstFileExW FindClose CreateHardLinkW ExitProcess SwitchToThread GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex GetFinalPathNameByHandleW CreateSymbolicLinkW DeviceIoControl DeleteFileW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleOutputCP GetFileAttributesW GetFileType GetModuleHandleW FormatMessageW IsProcessorFeaturePresent

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

ntdll

NtWriteFile NtOpenFile NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError

vcruntime140

__C_specific_handler _CxxThrowException __current_exception memcmp memcpy memmove __CxxFrameHandler3 memset __current_exception_context

api-ms-win-crt-math-l1-1-0

__setusermatherr log2 trunc fma ceil

api-ms-win-crt-runtime-l1-1-0

__p___argv _seh_filter_exe _set_app_type _crt_atexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc terminate _cexit _c_exit _register_thread_local_exe_atexit_callback _register_onexit_function _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_7a7e8fb79afd238232266703ae0645a6_akira_glassworm_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic