2026-07-18_712b5b7abdbbbb5fc95dcadd665d6b04_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-18_712b5b7abdbbbb5fc95dcadd665d6b04_akira_glassworm_rusty-stealer
Size 1.9MB
Sample260718-bchj4sbs2k
SHA256 6074f8f6a05a80bc8b9c62084ccee6c97fff309b88ada03006caa002d54b95d7
MD5 712b5b7abdbbbb5fc95dcadd665d6b04
SHA1 5e043798d8b8d20c9f139513566283ef41e90983
SHA512 a45c9c0d49201c2bd7f132c9e951d19c905baa7259c13ea5ae2517de109ac73f93dece6a8c027ee236c40a04badea012fba91c7edb557cfc64eb333814bdb353
SSDEEP 24576:c0YZy2Z63sTgbOhi+3fLBPjjYmKAhXL7JrNwRAGVIH06iyZFM:ZYDcIgboiwfLBP/tKKXLZIjIU6iY
TLSH
T185957C03E69584EAC49EC078C3579632BA32B88D0735B6EB2BD45A213E67FD05F1D709
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-18_712b5b7abdbbbb5fc95dcadd665d6b04_akira_glassworm_rusty-stealer

File Explorer

2026-07-18_712b5b7abdbbbb5fc95dcadd665d6b04_akira_glassworm_rusty-stealer

.exe 1.9MB

2026-07-18_712b5b7abdbbbb5fc95dcadd665d6b04_akira_glassworm_rusty-stealer

IMPHASH 2f1df005b1b2f98080f54c53e46b5bd0
SHA256 6074f8f6a05a80bc8b9c62084ccee6c97fff309b88ada03006caa002d54b95d7
MD5 712b5b7abdbbbb5fc95dcadd665d6b04
SHA1 5e043798d8b8d20c9f139513566283ef41e90983
SHA512 a45c9c0d49201c2bd7f132c9e951d19c905baa7259c13ea5ae2517de109ac73f93dece6a8c027ee236c40a04badea012fba91c7edb557cfc64eb333814bdb353
SSDEEP 24576:c0YZy2Z63sTgbOhi+3fLBPjjYmKAhXL7JrNwRAGVIH06iyZFM:ZYDcIgboiwfLBP/tKKXLZIjIU6iY
TLSH
T185957C03E69584EAC49EC078C3579632BA32B88D0735B6EB2BD45A213E67FD05F1D709
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1212972

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

agent.pdb

kernel32

AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CopyFileExW CreateDirectoryW CreateEventW CreateFileW CreateIoCompletionPort CreateMutexA CreateProcessW CreateThread CreateWaitableTimerExW DeleteFileW DuplicateHandle FindClose FindFirstFileExW FindNextFileW FormatMessageW FreeEnvironmentStringsW GetComputerNameExW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFinalPathNameByHandleW GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetQueuedCompletionStatusEx GetStdHandle GetSystemDirectoryW GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathW GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent LoadLibraryA MultiByteToWideChar PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency ReadFile ReadFileEx ReleaseMutex RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetFileCompletionNotificationModes SetFileInformationByHandle SetFileTime SetHandleInformation SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TerminateProcess UnhandledExceptionFilter WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFileEx lstrlenW

advapi32

GetUserNameW RegCloseKey RegOpenKeyExW RegQueryValueExW SystemFunction036

ntdll

NtCancelIoFileEx NtCreateFile NtCreateNamedPipeFile NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

ws2_32

WSACleanup WSAGetLastError WSAIoctl WSASend WSASocketW WSAStartup bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket recv send setsockopt shutdown

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

vcruntime140

__C_specific_handler __CxxFrameHandler3 __current_exception __current_exception_context memcmp memcpy memmove memset

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _c_exit _cexit _configure_narrow_argv _crt_atexit _exit _get_initial_narrow_environment _initialize_narrow_environment _initialize_onexit_table _initterm _initterm_e _register_onexit_function _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type exit terminate

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

651KB

Virtual Size

651KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

217B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-18_712b5b7abdbbbb5fc95dcadd665d6b04_akira_glassworm_rusty-stealer

kernel32

advapi32

ntdll

ws2_32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

bcrypt

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic