2026-07-15_fad15e56fe858df8dc05111717b11a40_akira_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-15_fad15e56fe858df8dc05111717b11a40_akira_elex_glassworm
Size 7.6MB
Sample260715-elyjgaa19n
SHA256 249c4b40d0e41bec0931b97a936e622bc4e23db8c315706c7316c7af1476f115
MD5 fad15e56fe858df8dc05111717b11a40
SHA1 2b90119c90ef639e5bf8602f9d8eb293792cb174
SHA512 d2c3319ece14e247fda948a47487bff68e5264766090dccc3fe01b8872649af1929ffd7cfd374c9742afbace77d038b0ff28dba20e51833d4bb0c01a9f64715c
SSDEEP 98304:xrdMpnU6jMhH6EEzTMZY/FXnlnr2NyPTW5HzlLeKAPV1OsKAPV1OsKAPV1OW:ldM1UmMHwMZEdrUyLWHaV8kV8kV8W
TLSH
T1638612027BFEB45EEA7B97B091A963514620FD370C51845976CD149B0F9BA003EFC3AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-07-15_fad15e56fe858df8dc05111717b11a40_akira_elex_glassworm

File Explorer

2026-07-15_fad15e56fe858df8dc05111717b11a40_akira_elex_glassworm

.exe 7.6MB

2026-07-15_fad15e56fe858df8dc05111717b11a40_akira_elex_glassworm

IMPHASH dd2eee954c2ec0622a2504805b032ef6
SHA256 249c4b40d0e41bec0931b97a936e622bc4e23db8c315706c7316c7af1476f115
MD5 fad15e56fe858df8dc05111717b11a40
SHA1 2b90119c90ef639e5bf8602f9d8eb293792cb174
SHA512 d2c3319ece14e247fda948a47487bff68e5264766090dccc3fe01b8872649af1929ffd7cfd374c9742afbace77d038b0ff28dba20e51833d4bb0c01a9f64715c
SSDEEP 98304:xrdMpnU6jMhH6EEzTMZY/FXnlnr2NyPTW5HzlLeKAPV1OsKAPV1OsKAPV1OW:ldM1UmMHwMZEdrUyLWHaV8kV8kV8W
TLSH
T1638612027BFEB45EEA7B97B091A963514620FD370C51845976CD149B0F9BA003EFC3AA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

44:8a:e7:c9:cc:c7:8d:46:b2:e9:0b:fe:ce:ed:a8:d1:f3:55:e2:64:df:11:0d:ea:33:31:1f:02:d7:91:c2:3c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Fortinet\, Inc.\, OU=FortiClient\, O=Fortinet\, Inc.\, L=Santa Clara\, S=California\, C=US

Chains

Jul 10, 2026

CN=Fortinet\, Inc.\, OU=FortiClient\, O=Fortinet\, Inc.\, L=Santa Clara\, S=California\, C=US

Minor OS version

Major OS version

Entry point

5088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CreateEventA CreateSemaphoreA DeleteCriticalSection EnterCriticalSection GetHandleInformation GetProcessAffinityMask GetSystemTimeAsFileTime GetThreadContext GetThreadPriority InitializeCriticalSection IsDebuggerPresent IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW OpenProcess OutputDebugStringA RaiseException ReleaseSemaphore ResetEvent ResumeThread SetEvent SetProcessAffinityMask SetThreadContext SetThreadPriority SuspendThread TerminateProcess TryEnterCriticalSection WaitForMultipleObjects AddVectoredExceptionHandler CloseHandle CreateFileMappingA CreateFileW CreateMutexA CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteFileA DuplicateHandle ExitProcess FormatMessageW FreeLibrary GetACP GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetLogicalDrives GetModuleFileNameA GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetSystemTimePreciseAsFileTime GetTickCount HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete LoadLibraryA MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency ReleaseMutex RtlCaptureContext SetFileInformationByHandle SetFileTime SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WriteConsoleW lstrlenW

msvcrt

__getmainargs __initenv __p__commode __p__fmode __set_app_type __setusermatherr _amsg_exit _beginthreadex _cexit _commode _endthreadex _errno _fmode _fpreset _initterm _iob _onexit _setjmp3 _strdup _vsnprintf _write abort calloc exit fprintf free fwrite longjmp malloc memcpy memmove memset memcmp printf realloc signal strlen strncmp vfprintf

ntdll

NtWriteFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

user32

GetCursorPos GetDesktopWindow GetForegroundWindow GetMessageTime GetSysColor GetSystemMetrics

Name

.text

Size

284KB

Virtual Size

284KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

492B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-15_fad15e56fe858df8dc05111717b11a40_akira_elex_glassworm

PE Signature issue

kernel32

msvcrt

ntdll

api-ms-win-core-synch-l1-2-0

user32

generic