2026-07-22_c666352e3a34e2f8de12d256ca854b29_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-22_c666352e3a34e2f8de12d256ca854b29_akira_glassworm_rusty-stealer
Size 8.9MB
Sample260722-3almjadd53
SHA256 e1f762be07d4389c247ce389bb6a71f632e5a2d7101755144e0b4956fc604404
MD5 c666352e3a34e2f8de12d256ca854b29
SHA1 0d1a791f1c9948db182a67e869423b0ade8d2bd7
SHA512 1a4b8c9869dba9893d6490454427d689fc12e7deea538424e72b9b9bd1ae05391c3b07dc345207968f805b6e29295c8273514b90a2059f13f9c44f1c76d2c463
SSDEEP 98304:01ckF02ctnDozv03xMoGuCzyNx1qhi58s:RrnDoT0aFNyNxwhi
TLSH
T17B962947BA114AD7F815C23484DA761B6BF6FC548612B75732F8DB61AF822C02FB9720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_c666352e3a34e2f8de12d256ca854b29_akira_glassworm_rusty-stealer

File Explorer

2026-07-22_c666352e3a34e2f8de12d256ca854b29_akira_glassworm_rusty-stealer

.exe 8.9MB

2026-07-22_c666352e3a34e2f8de12d256ca854b29_akira_glassworm_rusty-stealer

IMPHASH dac58db4c4f3f10820bcf2eb4b5732fc
SHA256 e1f762be07d4389c247ce389bb6a71f632e5a2d7101755144e0b4956fc604404
MD5 c666352e3a34e2f8de12d256ca854b29
SHA1 0d1a791f1c9948db182a67e869423b0ade8d2bd7
SHA512 1a4b8c9869dba9893d6490454427d689fc12e7deea538424e72b9b9bd1ae05391c3b07dc345207968f805b6e29295c8273514b90a2059f13f9c44f1c76d2c463
SSDEEP 98304:01ckF02ctnDozv03xMoGuCzyNx1qhi58s:RrnDoT0aFNyNxwhi
TLSH
T17B962947BA114AD7F815C23484DA761B6BF6FC548612B75732F8DB61AF822C02FB9720
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8474624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

binpeek.pdb

kernel32

CloseHandle SetConsoleActiveScreenBuffer SetConsoleCursorPosition SetLastError Sleep GetStdHandle GetConsoleMode SetConsoleMode SetConsoleTextAttribute GetNumberOfConsoleInputEvents ReadConsoleInputW FillConsoleOutputCharacterA GetLastError FillConsoleOutputAttribute GetConsoleOutputCP WriteConsoleW GetModuleHandleA SetConsoleCursorInfo GetConsoleScreenBufferInfo GetProcAddress IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter MultiByteToWideChar WideCharToMultiByte RtlVirtualUnwind ReleaseMutex CreateMutexA GetFileType ExitProcess GetFileInformationByHandleEx GetFileInformationByHandle FindClose FindFirstFileExW SetFileInformationByHandle SetFileTime GetFullPathNameW QueryPerformanceCounter FormatMessageW GetModuleHandleW QueryPerformanceFrequency GetEnvironmentVariableW GetProcessHeap HeapFree WaitForSingleObject SwitchToThread CreateThread HeapReAlloc GetCommandLineW GetModuleFileNameW CreateWaitableTimerExW SetWaitableTimer AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread WaitForMultipleObjects CreateConsoleScreenBuffer CreateFileW GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA lstrlenW GetCurrentProcessId HeapAlloc

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

user32

GetKeyboardLayout ToUnicodeEx GetWindowThreadProcessId GetForegroundWindow

vcruntime140

memmove memcpy memcmp __CxxFrameHandler3 memset __current_exception __C_specific_handler strstr strchr strrchr __current_exception_context

api-ms-win-crt-math-l1-1-0

log2 __setusermatherr round

api-ms-win-crt-string-l1-1-0

strcmp strcpy strncmp strlen strncpy

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc realloc free malloc

api-ms-win-crt-stdio-l1-1-0

__p__commode __acrt_iob_func __stdio_common_vfprintf _set_fmode __stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv terminate _crt_atexit _register_onexit_function _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit exit _initterm_e _wassert _initterm _get_initial_narrow_environment _cexit _initialize_narrow_environment _configure_narrow_argv _seh_filter_exe _set_app_type _exit

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6.2MB

Virtual Size

6.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

31KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

172KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.vmp

Size

847KB

Virtual Size

848KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_c666352e3a34e2f8de12d256ca854b29_akira_glassworm_rusty-stealer

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

user32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic