General

  • Target
    2026-07-20_48c76fed56fa95cefbccb87b6d73b737_akira_glassworm_quasar-rat_rusty-stealer
  • Size 110.0MB
  • Sample260720-zemtlset4j
  • SHA256 fabd6438135e90802f1a14c61bca71cd5191bfc4b21d9918738810729ab773e7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-07-20_48c76fed56fa95cefbccb87b6d73b737_akira_glassworm_quasar-rat_rusty-stealer
    .exe 110.0MB

2026-07-20_48c76fed56fa95cefbccb87b6d73b737_akira_glassworm_quasar-rat_rusty-stealer

  • IMPHASH 225ee3f6968c584b4275f2887e7ed3ff
  • SHA256 fabd6438135e90802f1a14c61bca71cd5191bfc4b21d9918738810729ab773e7
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.

  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
f1:a7:7c:db:3e:ad:68:72:19:e6:0c:f2:9d:d8:1a:3d:b1:54:85:a8:d3:84:a4:d4:82:45:c7:77:38:fc:62:b2
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Andreas Schindel,O=Schindel Software GmbH,L=München,ST=Bayern,C=DE
Minor OS version
0
Major OS version
6
Entry point
4416
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths