2026-07-20_7b7b10bd1cc69fbfeeb969fbdc85b509_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_7b7b10bd1cc69fbfeeb969fbdc85b509_akira_glassworm_rusty-stealer
Size 50.0MB
Sample260720-endbbaht4v
SHA256 ff8668a16f45854e92989c207cc3cc3326d4ea4c43259cfb4b8aef455027c2ce
MD5 7b7b10bd1cc69fbfeeb969fbdc85b509
SHA1 cb4f5dbaba70423c8989a0e3d54cf44b3a117b75
SHA512 cb0772404a212714b40e98d94176f5b523f022beee200ba02c65a21d5d55e1b34cad3098aef93dd4d6b6f6c9b596606e5d1949e09a78c224e664941bd3131598
SSDEEP 786432:8PFSNc8GPK50+rmiJ5DrakDfsNLk/YfcmeMll0hg0NuDC18Rl58uP0Hz:HGPKLrzJ5vENLGse00iX1b58E0T
TLSH
T1A5B72343F6A691EDC16AC079865A5223FB72B84907207BEB56908B353F13FE06E7D344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-07-20_7b7b10bd1cc69fbfeeb969fbdc85b509_akira_glassworm_rusty-stealer

File Explorer

2026-07-20_7b7b10bd1cc69fbfeeb969fbdc85b509_akira_glassworm_rusty-stealer

.exe 50.0MB

2026-07-20_7b7b10bd1cc69fbfeeb969fbdc85b509_akira_glassworm_rusty-stealer

IMPHASH b4c566d5e6e704fa0456e3f618551bbf
SHA256 ff8668a16f45854e92989c207cc3cc3326d4ea4c43259cfb4b8aef455027c2ce
MD5 7b7b10bd1cc69fbfeeb969fbdc85b509
SHA1 cb4f5dbaba70423c8989a0e3d54cf44b3a117b75
SHA512 cb0772404a212714b40e98d94176f5b523f022beee200ba02c65a21d5d55e1b34cad3098aef93dd4d6b6f6c9b596606e5d1949e09a78c224e664941bd3131598
SSDEEP 786432:8PFSNc8GPK50+rmiJ5DrakDfsNLk/YfcmeMll0hg0NuDC18Rl58uP0Hz:HGPKLrzJ5vENLGse00iX1b58E0T
TLSH
T1A5B72343F6A691EDC16AC079865A5223FB72B84907207BEB56908B353F13FE06E7D344
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

04:3a:cb:0f:6e:ea:b4:a9:cd:fa:57:b8:01:2c:46:4e:2e:3f:45:9d:17:35:ef:db:36:e9:8e:0b:76:e9:92:ca

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility

Chains

Jul 17, 2026

CN=Microsoft Windows Software Compatibility

Minor OS version

Major OS version

Entry point

3873696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

spongebob_launcher.pdb

kernel32

Sleep ExitProcess CreateEventW CancelIo GetOverlappedResult ReadFile GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle CreateWaitableTimerExW WaitForMultipleObjects GetExitCodeProcess ReadFileEx DeleteFileW SetHandleInformation GetTempPathW GetModuleFileNameW GetFileInformationByHandleEx GetFileInformationByHandle SetFileInformationByHandle LoadLibraryExA FreeLibrary SetFileTime CreateFileW FindFirstFileExW GetFullPathNameW CreateDirectoryW HeapAlloc WaitForSingleObject ReleaseMutex AddVectoredExceptionHandler QueryPerformanceCounter CreateMutexA PostQueuedCompletionStatus GetFinalPathNameByHandleW SetLastError LoadLibraryA WaitForSingleObjectEx GetCurrentThreadId GetModuleHandleW WriteFileEx SleepEx GetCurrentProcessId SetFilePointerEx GetSystemTimePreciseAsFileTime GetProcessHeap CopyFileExW FindNextFileW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetCurrentDirectoryW lstrlenW WideCharToMultiByte GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW GetEnvironmentVariableW FormatMessageW QueryPerformanceFrequency GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal SetFileCompletionNotificationModes FlushFileBuffers GetTickCount MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime GetFileSize LockFileEx LocalFree UnlockFile HeapDestroy HeapCompact LoadLibraryW GetSystemInfo DeleteFileA CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapSize HeapValidate UnmapViewOfFile CreateMutexW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile HeapCreate AreFileApisANSI RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection CreateIoCompletionPort TerminateProcess IsProcessorFeaturePresent SetWaitableTimer GetQueuedCompletionStatusEx UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeSListHead SwitchToThread FindClose HeapReAlloc GetCurrentThread SetThreadStackGuarantee GetLastError CloseHandle GetCurrentProcess GetModuleHandleA CreateThread HeapFree GetProcAddress IsDebuggerPresent

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

ws2_32

WSASocketW WSACleanup ioctlsocket getaddrinfo freeaddrinfo WSAIoctl setsockopt send shutdown closesocket WSASend WSAStartup connect getpeername getsockopt recv getsockname WSAGetLastError bind

ntdll

NtDeviceIoControlFile NtCancelIoFileEx NtWriteFile NtReadFile NtOpenFile NtCreateFile RtlNtStatusToDosError NtCreateNamedPipeFile

secur32

QueryContextAttributesW InitializeSecurityContextW FreeContextBuffer DeleteSecurityContext FreeCredentialsHandle EncryptMessage DecryptMessage ApplyControlToken AcceptSecurityContext AcquireCredentialsHandleA

crypt32

CertGetCertificateChain CertAddCertificateContextToStore CertDuplicateStore CertCloseStore CertDuplicateCertificateChain CertFreeCertificateContext CertFreeCertificateChain CertVerifyCertificateChainPolicy CertDuplicateCertificateContext CertEnumCertificatesInStore CertOpenStore

oleaut32

SysStringLen GetErrorInfo SysFreeString

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

shell32

ShellExecuteW SHGetKnownFolderPath

user32

ReleaseDC SetProcessDPIAware EnumDisplayMonitors GetDC

gdi32

CreateCompatibleBitmap SelectObject BitBlt GetDIBits DeleteObject DeleteDC CreateCompatibleDC

vcruntime140

__CxxFrameHandler3 memcpy memmove memset __current_exception_context __current_exception __C_specific_handler strrchr memcmp

api-ms-win-crt-string-l1-1-0

wcslen strspn strncmp strcspn strcmp strlen

api-ms-win-crt-math-l1-1-0

cos __setusermatherr sin log

api-ms-win-crt-heap-l1-1-0

realloc _set_new_mode free malloc _msize

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initialize_narrow_environment terminate _get_initial_narrow_environment _set_app_type _initterm _initterm_e exit _exit __p___argc _register_onexit_function _initialize_onexit_table __p___argv _beginthreadex _crt_atexit _endthreadex _cexit _c_exit _seh_filter_exe _register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_7b7b10bd1cc69fbfeeb969fbdc85b509_akira_glassworm_rusty-stealer

PE Signature issue

kernel32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

ws2_32

ntdll

secur32

crypt32

oleaut32

advapi32

shell32

user32

gdi32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic