2026-07-16_545882ce6d97e6c0c6f461b800378512_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-16_545882ce6d97e6c0c6f461b800378512_akira_glassworm_rusty-stealer
Size 203KB
Sample260716-dd46lsfs7s
SHA256 9eb3c62eb275e64083e88f2c1f4334a3ccd9e4d17551a9cdad6a01bc43bb9a86
MD5 545882ce6d97e6c0c6f461b800378512
SHA1 400075ecd8fb381e92dbb7cdfc0b21088541af57
SHA512 bbe28f0c4464ef90d20a8af82a8b3f049cfbc824c1c5e90c91256787de57592af23659fd536bf61f1529df030673c5558db72156685d68cd973cdb0414f8ccee
SSDEEP 3072:paJr1v3EIWJ7/KERoxqYANEZTS09V0r0VLJ3hpzYPRiEBzWQ:UJB/RA/KGoYY0EZp9Cr0D3h+Myz
TLSH
T15F144B13769984F8D90BC074C34546A2A532B8CA0B367AFF12A422346F79AF57F3DB14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-16_545882ce6d97e6c0c6f461b800378512_akira_glassworm_rusty-stealer

File Explorer

2026-07-16_545882ce6d97e6c0c6f461b800378512_akira_glassworm_rusty-stealer

.exe 203KB

2026-07-16_545882ce6d97e6c0c6f461b800378512_akira_glassworm_rusty-stealer

IMPHASH 9b25e94c250531b2fd62c8f4bce82998
SHA256 9eb3c62eb275e64083e88f2c1f4334a3ccd9e4d17551a9cdad6a01bc43bb9a86
MD5 545882ce6d97e6c0c6f461b800378512
SHA1 400075ecd8fb381e92dbb7cdfc0b21088541af57
SHA512 bbe28f0c4464ef90d20a8af82a8b3f049cfbc824c1c5e90c91256787de57592af23659fd536bf61f1529df030673c5558db72156685d68cd973cdb0414f8ccee
SSDEEP 3072:paJr1v3EIWJ7/KERoxqYANEZTS09V0r0VLJ3hpzYPRiEBzWQ:UJB/RA/KGoYY0EZp9Cr0D3h+Myz
TLSH
T15F144B13769984F8D90BC074C34546A2A532B8CA0B367AFF12A422346F79AF57F3DB14
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

148828

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

svchost.pdb

oleaut32

GetErrorInfo

kernel32

HeapAlloc GetLastError SetLastError LocalFree HeapFree GetProcAddress GetProcessHeap FormatMessageW CloseHandle QueryPerformanceCounter ExitProcess GetModuleHandleW GetModuleHandleA GetEnvironmentVariableW WriteConsoleW MultiByteToWideChar GetConsoleOutputCP GetCurrentThreadId GetStdHandle WideCharToMultiByte RtlVirtualUnwind ReleaseMutex CreateMutexA GetCurrentProcessId lstrlenW GetCurrentProcess GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetConsoleMode CreateNamedPipeW ConnectNamedPipe GetCurrentThread CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject Sleep ReadProcessMemory CreateThread CreateFileW GetFullPathNameW GetCommandLineW GetModuleFileNameW AddVectoredExceptionHandler SetThreadStackGuarantee HeapReAlloc GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA

ole32

CreateStreamOnHGlobal CreateObjrefMoniker CreateBindCtx CoInitializeEx CoUnmarshalInterface CoCreateFreeThreadedMarshaler

ntdll

NtWriteFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

advapi32

ConvertStringSidToSidW GetSidSubAuthority GetSidSubAuthorityCount RevertToSelf ImpersonateNamedPipeClient ConvertStringSecurityDescriptorToSecurityDescriptorW LookupAccountSidW

vcruntime140

memcpy memcmp memset memmove __current_exception_context __current_exception __C_specific_handler __CxxFrameHandler3

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _crt_atexit _initialize_onexit_table _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type terminate _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _c_exit __p___argc __p___argv _cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-16_545882ce6d97e6c0c6f461b800378512_akira_glassworm_rusty-stealer

oleaut32

kernel32

ole32

ntdll

api-ms-win-core-synch-l1-2-0

advapi32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic