2026-07-09_a34518a586f0d6a261b350700241d57f_akira_glassworm_rusty-stealer_wannacry_zxxz

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-09_a34518a586f0d6a261b350700241d57f_akira_glassworm_rusty-stealer_wannacry_zxxz
Size 11.8MB
Sample260709-cesnjacw4s
SHA256 a1836b153f6b292fff7a4f03e848897bbdf3f00cd8cf8d4f5252887bc2ac6c17
MD5 a34518a586f0d6a261b350700241d57f
SHA1 c0fc47f007f6bc9a53cea005df9ec0538e2317bd
SHA512 c54719a8842780af027d982af9ee0035deb12f813f8222f14237f4f82e7da841f05c295b3f684753dea7c92c64e22ba71983c8a70bb8a74a45c5c33525dfcd29
SSDEEP 98304:yeI7FAuS9WsJHVrSAnX65beqHkRr3rIDJrxaYAaZWQD/Y0dtnCJEhpWWn+o:ArSsAX65pElydtnCyj1N
TLSH
T1B5C66B43F79184E9C0AEC174C76A9773BB32F88D4521736B1BE45A212E1AB906F0C7D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_a34518a586f0d6a261b350700241d57f_akira_glassworm_rusty-stealer_wannacry_zxxz

File Explorer

2026-07-09_a34518a586f0d6a261b350700241d57f_akira_glassworm_rusty-stealer_wannacry_zxxz

.exe 11.8MB

2026-07-09_a34518a586f0d6a261b350700241d57f_akira_glassworm_rusty-stealer_wannacry_zxxz

IMPHASH 50fbc47dd2bb38eed1e7252b4d20f1cd
SHA256 a1836b153f6b292fff7a4f03e848897bbdf3f00cd8cf8d4f5252887bc2ac6c17
MD5 a34518a586f0d6a261b350700241d57f
SHA1 c0fc47f007f6bc9a53cea005df9ec0538e2317bd
SHA512 c54719a8842780af027d982af9ee0035deb12f813f8222f14237f4f82e7da841f05c295b3f684753dea7c92c64e22ba71983c8a70bb8a74a45c5c33525dfcd29
SSDEEP 98304:yeI7FAuS9WsJHVrSAnX65beqHkRr3rIDJrxaYAaZWQD/Y0dtnCJEhpWWn+o:ArSsAX65pElydtnCyj1N
TLSH
T1B5C66B43F79184E9C0AEC174C76A9773BB32F88D4521736B1BE45A212E1AB906F0C7D9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6051676

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

harmless_asset_manager.pdb

kernel32

EncodePointer TlsGetValue RaiseException lstrlenW FormatMessageW WideCharToMultiByte TlsSetValue TlsFree UnhandledExceptionFilter LoadLibraryA GlobalSize SetUnhandledExceptionFilter GetProcessHeap GlobalFree HeapFree HeapReAlloc InitializeSListHead RtlPcToFileHeader MultiByteToWideChar RtlUnwindEx GlobalLock SwitchToThread GlobalAlloc IsDebuggerPresent LoadLibraryW Sleep GetSystemTimeAsFileTime WaitForSingleObject RtlLookupFunctionEntry SetLastError WaitForSingleObjectEx GetCurrentProcess GetLastError GetModuleFileNameW SetHandleInformation SleepEx GetSystemTimePreciseAsFileTime SetWaitableTimer ExitProcess GetSystemDirectoryW SleepConditionVariableSRW DuplicateHandle WaitForMultipleObjects GetExitCodeProcess GlobalUnlock PostQueuedCompletionStatus FindNextFileW GetFileAttributesW FreeEnvironmentStringsW GetEnvironmentStringsW CreateProcessW ReadFile GetOverlappedResult CancelIo CreateEventW CreateWaitableTimerExW QueryPerformanceCounter ReadFileEx WriteFileEx CreateThread QueryPerformanceFrequency DeviceIoControl CreateSymbolicLinkW GetFinalPathNameByHandleW DeleteFileW GetTempPathW GetCommandLineW GetFileInformationByHandleEx GetFileInformationByHandle CreateFileW FindClose FindFirstFileExW GetFullPathNameW CreateDirectoryW GetEnvironmentVariableW CreateMutexA GetCurrentDirectoryW RtlVirtualUnwind WakeAllConditionVariable RtlCaptureContext WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle AcquireSRWLockExclusive ReleaseSRWLockExclusive IsProcessorFeaturePresent GetUserDefaultUILanguage HeapAlloc LCIDToLocaleName GetModuleHandleW ReleaseMutex GetCurrentThreadId GetSystemInfo GetUserPreferredUILanguages CreatePipe SetFileCompletionNotificationModes CreateIoCompletionPort GetQueuedCompletionStatusEx TerminateProcess CreateMutexW SetFileInformationByHandle GetTimeZoneInformationForYear MoveFileExW SetEnvironmentVariableW GetNativeSystemInfo CloseHandle GetCurrentThread GetProcAddress SetThreadStackGuarantee LoadLibraryExA FreeLibrary AddVectoredExceptionHandler GetModuleHandleA OutputDebugStringA OutputDebugStringW LoadLibraryExW GetCurrentProcessId DeleteCriticalSection TlsAlloc GetProcessId GetWindowsDirectoryW CompareStringOrdinal InitializeCriticalSectionAndSpinCount

bcryptprimitives

ProcessPrng

ntdll

RtlGetVersion NtDeviceIoControlFile NtCreateFile NtWriteFile NtReadFile NtOpenFile NtCreateNamedPipeFile RtlNtStatusToDosError NtCancelIoFileEx

user32

UpdateWindow SetCursorPos IsWindow RegisterTouchWindow SetClipboardData InvalidateRect GetForegroundWindow IsWindowEnabled EmptyClipboard SetWindowTextW IsWindowVisible GetWindowTextW GetWindowTextLengthW EnableWindow SetParent SetPropW GetKeyboardState EnumDisplayMonitors MonitorFromPoint SetWindowDisplayAffinity MonitorFromRect ToUnicodeEx OpenClipboard GetKeyState MapVirtualKeyExW RegisterClipboardFormatW GetClipboardData GetKeyboardLayout ShowCursor CloseClipboard ClipCursor GetClipCursor SetFocus SetWindowLongW GetSystemMenu GetWindowPlacement GetMonitorInfoW SetWindowPlacement ChangeDisplaySettingsExW RegisterRawInputDevices AdjustWindowRectEx GetMenu GetWindowLongW InvalidateRgn ReleaseCapture SetCapture CloseTouchInputHandle GetWindow SetCursor DestroyWindow AdjustWindowRect RedrawWindow GetWindowLongPtrW PostMessageW RegisterWindowMessageA FindWindowExW LoadCursorW IsProcessDPIAware RegisterClassExW MonitorFromWindow TrackPopupMenu FlashWindowEx GetAsyncKeyState SetWindowRgn SetForegroundWindow ClientToScreen EnableMenuItem DrawIconEx GetDC AppendMenuW InsertMenuW SendInput CheckMenuItem DrawTextW ReleaseDC FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo PostQuitMessage ShowWindow SystemParametersInfoA GetActiveWindow SetMenu RemoveMenu CreateIcon SetMenuItemInfoW DrawMenuBar CreatePopupMenu CreateMenu CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu GetParent IsClipboardFormatAvailable DefWindowProcW SendMessageW FindWindowW TranslateAcceleratorW GetMenuItemInfoW GetSystemMetrics SystemParametersInfoW TrackMouseEvent CreateWindowExW ScreenToClient MsgWaitForMultipleObjectsEx DispatchMessageW MapVirtualKeyW GetUpdateRect PeekMessageW PostThreadMessageW ValidateRect GetRawInputData GetMessageW SetWindowLongPtrW GetCursorPos GetTouchInputInfo IsIconic SetWindowPos GetMessageA EnumChildWindows DispatchMessageA TranslateMessage

gdi32

DeleteObject BitBlt GetDeviceCaps CombineRgn CreateRectRgn CreateSolidBrush DeleteDC SelectObject CreateDIBSection CreateCompatibleDC SetTextColor SetBkMode GetObjectW CreateBitmap

shell32

ILFree ShellExecuteExW DragFinish SHCreateItemFromParsingName DragQueryFileW SHOpenFolderAndSelectItems SHCreateShellItemArrayFromIDLists ILCreateFromPathW SHAppBarMessage SHGetKnownFolderPath ShellExecuteW

ole32

RegisterDragDrop CoInitialize RevokeDragDrop CoInitializeEx CoUninitialize CoTaskMemAlloc CoCreateFreeThreadedMarshaler OleInitialize CoCreateInstance CoTaskMemFree DoDragDrop

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

comctl32

DefSubclassProc TaskDialogIndirect RemoveWindowSubclass SetWindowSubclass

shlwapi

SHCreateMemStream

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute DwmGetWindowAttribute

advapi32

RegDeleteTreeW RegCloseKey RegGetValueW RegCreateKeyTransactedW RegCreateKeyExW ImpersonateAnonymousToken RevertToSelf SystemFunction036 EventRegister RegOpenKeyTransactedW RegQueryValueExW EventSetInformation EventWriteTransfer EventUnregister RegSetValueExW RegOpenKeyExW

oleaut32

SysStringLen GetErrorInfo SysFreeString SetErrorInfo

windowscodecs

WICConvertBitmapSource

bcrypt

BCryptGenRandom

crypt32

CertGetCertificateChain CertAddCertificateContextToStore CertFreeCertificateChain CertDuplicateCertificateChain CertFreeCertificateContext CertVerifyCertificateChainPolicy CertDuplicateStore CertDuplicateCertificateContext CertOpenStore CertEnumCertificatesInStore CertCloseStore

ws2_32

WSAIoctl accept WSASend shutdown send recv closesocket freeaddrinfo getaddrinfo WSAGetLastError WSASocketW getsockname getpeername socket WSACleanup WSAStartup ioctlsocket bind setsockopt listen connect getsockopt

secur32

DecryptMessage FreeCredentialsHandle QueryContextAttributesW DeleteSecurityContext ApplyControlToken InitializeSecurityContextW AcceptSecurityContext FreeContextBuffer AcquireCredentialsHandleA EncryptMessage

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e exit _exit abort __p___argc __p___argv _cexit _configure_narrow_argv _set_app_type _seh_filter_exe _c_exit _register_thread_local_exe_atexit_callback terminate _get_initial_narrow_environment _initialize_onexit_table _initialize_narrow_environment _crt_atexit _register_onexit_function strerror

api-ms-win-crt-string-l1-1-0

strlen strcmp strcpy_s wcsncmp wcsncat _wcsicmp wcslen wcscmp

api-ms-win-crt-math-l1-1-0

roundf ceil round __setusermatherr pow floor trunc

api-ms-win-crt-heap-l1-1-0

_callnewh calloc malloc free _set_new_mode

api-ms-win-crt-utility-l1-1-0

_rotl64

api-ms-win-crt-convert-l1-1-0

_ultow_s _wtoi wcstol

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Name

.text

Size

5.9MB

Virtual Size

5.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

159KB

Virtual Size

158KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.taubndl

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

99KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

229KB

Virtual Size

228KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-09_a34518a586f0d6a261b350700241d57f_akira_glassworm_rusty-stealer_wannacry_zxxz

kernel32

bcryptprimitives

ntdll

user32

gdi32

shell32

ole32

api-ms-win-core-synch-l1-2-0

comctl32

shlwapi

dwmapi

advapi32

oleaut32

windowscodecs

bcrypt

crypt32

ws2_32

secur32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic