2026-07-16_d7dc27e31ff1d0124cb81009829d01bb_akira_glassworm_icedid_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-16_d7dc27e31ff1d0124cb81009829d01bb_akira_glassworm_icedid_rusty-stealer
Size 4.6MB
Sample260716-grfxqaes8k
SHA256 4f025a4778671d65b4d56d4a9cb169176c6f03ea45e1ded269d9cd0b9af3b44a
MD5 d7dc27e31ff1d0124cb81009829d01bb
SHA1 cb76cea762c65d40334472c431a3f4b54975eeed
SHA512 49f4bc006afe9652b90fb86c6a19fedf0053d9b57c658145ab6c3cafcdca32a03d39d6f9c07829264f231ea1862bb689f3840f2575781235c2837d3ca64b1520
SSDEEP 49152:8vejLH6sn+d8d0CdvkYRh1Y9Puo9zoy9jlRX2CXu4RTFXQ96styCIl9LtghSAZ3M:qu911o9z9VldJ4Hn/Z3X37XA/6CIG
TLSH
T1E3265B47FAA351E8C569C034835A7233FB72B88D47357AEB5AD447313E52AA01E7CB48
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-16_d7dc27e31ff1d0124cb81009829d01bb_akira_glassworm_icedid_rusty-stealer

File Explorer

2026-07-16_d7dc27e31ff1d0124cb81009829d01bb_akira_glassworm_icedid_rusty-stealer

.exe 4.6MB

2026-07-16_d7dc27e31ff1d0124cb81009829d01bb_akira_glassworm_icedid_rusty-stealer

IMPHASH ebbf220ea48664672aab9f7ec743f529
SHA256 4f025a4778671d65b4d56d4a9cb169176c6f03ea45e1ded269d9cd0b9af3b44a
MD5 d7dc27e31ff1d0124cb81009829d01bb
SHA1 cb76cea762c65d40334472c431a3f4b54975eeed
SHA512 49f4bc006afe9652b90fb86c6a19fedf0053d9b57c658145ab6c3cafcdca32a03d39d6f9c07829264f231ea1862bb689f3840f2575781235c2837d3ca64b1520
SSDEEP 49152:8vejLH6sn+d8d0CdvkYRh1Y9Puo9zoy9jlRX2CXu4RTFXQ96styCIl9LtghSAZ3M:qu911o9z9VldJ4Hn/Z3X37XA/6CIG
TLSH
T1E3265B47FAA351E8C569C034835A7233FB72B88D47357AEB5AD447313E52AA01E7CB48
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2948012

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rg.pdb

kernel32

GetComputerNameExW GetStdHandle GetFileInformationByHandle SetStdHandle FreeLibrary GetSystemTimeAsFileTime FlushFileBuffers CloseHandle GetFileType GetSystemInfo GetConsoleScreenBufferInfo SetConsoleMode SetConsoleTextAttribute FindNextFileW SetFilePointerEx GetFileAttributesW GetWindowsDirectoryW GetSystemDirectoryW GetFinalPathNameByHandleW ReadConsoleW GetFileInformationByHandleEx SetFileInformationByHandle FindFirstFileExW WriteConsoleW FindClose GetConsoleOutputCP GetConsoleMode DuplicateHandle GetFullPathNameW SetLastError GetLastError GetCommandLineW HeapSize LCMapStringW CompareStringW InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetStringTypeW SetEnvironmentVariableW GetCPInfo GetOEMCP GetACP IsValidCodePage GetCommandLineA GetModuleHandleExW WriteFile RtlPcToFileHeader LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection GetProcessHeap HeapFree QueryPerformanceCounter SwitchToThread UnmapViewOfFile HeapReAlloc AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread WaitForSingleObject GetExitCodeProcess CreateFileMappingW MapViewOfFile GetCurrentProcess VirtualProtect CreateWaitableTimerExW SetWaitableTimer Sleep MultiByteToWideChar GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetCurrentDirectoryW WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW GetCurrentProcessId CreateMutexA WideCharToMultiByte ReleaseMutex GetEnvironmentVariableW HeapAlloc CreateFileW GetModuleHandleW FormatMessageW GetModuleHandleA GetModuleFileNameW QueryPerformanceFrequency CreateThread WriteFileEx SleepEx ReadFileEx ExitProcess CompareStringOrdinal CreateProcessW GetEnvironmentStringsW FreeEnvironmentStringsW VirtualAlloc VirtualFree EnterCriticalSection RaiseException EncodePointer RtlUnwindEx GetStartupInfoW IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter

ntdll

NtWriteFile NtReadFile NtOpenFile NtCreateNamedPipeFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

userenv

GetUserProfileDirectoryW

Name

.text

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

596KB

Virtual Size

600KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-16_d7dc27e31ff1d0124cb81009829d01bb_akira_glassworm_icedid_rusty-stealer

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

bcryptprimitives

userenv

generic