2026-07-18_1d92a7c12927770a23a90771e523be37_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-18_1d92a7c12927770a23a90771e523be37_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk
Size 2.7MB
Sample260718-bk6lxaft21
SHA256 0139bb6bd4d6b59fbe4e8554845361a9483ff71f71c0214072b04d42a2fa6026
MD5 1d92a7c12927770a23a90771e523be37
SHA1 83ef2375be5d9b1e58b7cac217753266c72b63b9
SHA512 62c5b1d1030a7a3305b988b7162108a4d8376d9e4e5cda70dbbf0f7baa995b4513cd90c461d173ed9057154fb6a6365d9247f1e92e0cca222b61d7923efe4d9f
SSDEEP 49152:pVA3rdosXOYyCbFZY0gdL72IU6ie88HhWW:HA3rFXJQ0gdh+e8K
TLSH
T116D58D13E1D540E8D4AEC078D7169633AA72B8DD0A34B6AB1BF05A112F7AFD06F2C715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-18_1d92a7c12927770a23a90771e523be37_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk

File Explorer

2026-07-18_1d92a7c12927770a23a90771e523be37_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk

.exe 2.7MB

2026-07-18_1d92a7c12927770a23a90771e523be37_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk

IMPHASH c8cebdb8b37cd4cc1cc2c98ea81f96aa
SHA256 0139bb6bd4d6b59fbe4e8554845361a9483ff71f71c0214072b04d42a2fa6026
MD5 1d92a7c12927770a23a90771e523be37
SHA1 83ef2375be5d9b1e58b7cac217753266c72b63b9
SHA512 62c5b1d1030a7a3305b988b7162108a4d8376d9e4e5cda70dbbf0f7baa995b4513cd90c461d173ed9057154fb6a6365d9247f1e92e0cca222b61d7923efe4d9f
SSDEEP 49152:pVA3rdosXOYyCbFZY0gdL72IU6ie88HhWW:HA3rFXJQ0gdh+e8K
TLSH
T116D58D13E1D540E8D4AEC078D7169633AA72B8DD0A34B6AB1BF05A112F7AFD06F2C715
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1763824

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared ActivateActCtx AddVectoredExceptionHandler CancelIo CheckRemoteDebuggerPresent CloseHandle CompareStringOrdinal CompareStringW CreateActCtxW CreateDirectoryW CreateEventW CreateFileW CreateMutexA CreateMutexW CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DuplicateHandle EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameW GetConsoleCP GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileType GetFullPathNameW GetLastError GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetOverlappedResult GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempFileNameW GetTempPathW GetThreadContext GetTickCount64 GetUserPreferredUILanguages GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalMemoryStatusEx GlobalUnlock HeapAlloc HeapFree HeapReAlloc HeapSize InitOnceExecuteOnce InitializeCriticalSectionAndSpinCount InitializeProcThreadAttributeList InitializeSListHead InitializeSRWLock IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW MultiByteToWideChar OpenMutexW OpenProcess OutputDebugStringW Process32FirstW Process32NextW ProcessIdToSessionId QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReadFileEx ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEnvironmentVariableA SetFileInformationByHandle SetFilePointerEx SetFileTime SetHandleInformation SetLastError SetStdHandle SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UpdateProcThreadAttribute WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile WriteFileEx lstrlenW

gdiplus

GdipCreateBitmapFromStream GdipCreateFont GdipCreateFontFamilyFromName GdipCreateFromHDC GdipCreateSolidFill GdipCreateStringFormat GdipDeleteBrush GdipDeleteFont GdipDeleteFontFamily GdipDeleteGraphics GdipDeleteStringFormat GdipDisposeImage GdipDrawImageRectI GdipDrawString GdipFillEllipseI GdipSetInterpolationMode GdipSetPixelOffsetMode GdipSetSmoothingMode GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipSetTextRenderingHint GdiplusShutdown GdiplusStartup

shell32

DragFinish DragQueryFileW DragQueryPoint

advapi32

CreateProcessAsUserW DuplicateTokenEx OpenProcessToken RegCloseKey RegCreateKeyExW RegGetValueW RegSetValueExW

comctl32

ord413 ord411 InitCommonControlsEx ord412 ord410

gdi32

CreateFontW CreateSolidBrush DeleteObject GetObjectW GetStockObject SelectObject SetBkMode SetTextColor

ole32

CoInitialize CreateStreamOnHGlobal

psapi

GetProcessMemoryInfo

user32

AdjustWindowRectEx CloseClipboard CreateWindowExW DefWindowProcW DeleteMenu DestroyMenu DestroyWindow DispatchMessageW DrawTextW EmptyClipboard EnumChildWindows EnumDisplayDevicesW FillRect GetAncestor GetClassInfoExW GetClassNameW GetClientRect GetDC GetMenuItemCount GetMenuItemID GetMessageW GetMonitorInfoW GetParent GetSubMenu GetSysColorBrush GetSystemMetrics GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW InvalidateRect IsDialogMessageW IsWindow LoadCursorW LoadImageW MonitorFromWindow OpenClipboard PostMessageW RegisterClassExW ReleaseDC ScreenToClient SendMessageW SendNotifyMessageW SetClipboardData SetParent SetWindowPos SetWindowTextW ShowWindow TranslateMessage

ntdll

NtCreateNamedPipeFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

ws2_32

WSACleanup WSAGetLastError WSASocketW WSAStartup closesocket connect freeaddrinfo getaddrinfo getpeername getsockopt ioctlsocket recv select send setsockopt

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

852KB

Virtual Size

852KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

19KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

132B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

377B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-18_1d92a7c12927770a23a90771e523be37_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

gdiplus

shell32

advapi32

comctl32

gdi32

ole32

psapi

user32

ntdll

ws2_32

generic