2026-07-22_e7adc717cc25f304810a702a9dfcf8df_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-22_e7adc717cc25f304810a702a9dfcf8df_akira_glassworm_rusty-stealer
Size 14.5MB
Sample260722-vcwaradk4y
SHA256 8260f3f3fb687cb9043f9927a4d34e90c1ce66c2fe1e00d7578603d413ce26f0
MD5 e7adc717cc25f304810a702a9dfcf8df
SHA1 08fabff0f71fa5cf5e7d50b7198d9e2b2b5f96c0
SHA512 4c6696accf87be511af8d52138c54f57aec0387e28cd50d1202193b03448a159accc6c0a5f876440aba90a072731598b5783f2a7978210838b30fe493eba67ee
SSDEEP 98304:mRK7lYfL/cL0BV+g0aJQetJTWv9Mh/gkQI8lS+R7w5mxqstyOzjoMH:kv0gavJkQI8oG7
TLSH
T10FE6F6216B9E99A9D09AC474834A8B734A3130CB0B35B9FF44D456792FB9AF45F3C318
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_e7adc717cc25f304810a702a9dfcf8df_akira_glassworm_rusty-stealer

File Explorer

2026-07-22_e7adc717cc25f304810a702a9dfcf8df_akira_glassworm_rusty-stealer

.exe 14.5MB

2026-07-22_e7adc717cc25f304810a702a9dfcf8df_akira_glassworm_rusty-stealer

IMPHASH 18074d3311f183e19813cf87d1f63850
SHA256 8260f3f3fb687cb9043f9927a4d34e90c1ce66c2fe1e00d7578603d413ce26f0
MD5 e7adc717cc25f304810a702a9dfcf8df
SHA1 08fabff0f71fa5cf5e7d50b7198d9e2b2b5f96c0
SHA512 4c6696accf87be511af8d52138c54f57aec0387e28cd50d1202193b03448a159accc6c0a5f876440aba90a072731598b5783f2a7978210838b30fe493eba67ee
SSDEEP 98304:mRK7lYfL/cL0BV+g0aJQetJTWv9Mh/gkQI8lS+R7w5mxqstyOzjoMH:kv0gavJkQI8oG7
TLSH
T10FE6F6216B9E99A9D09AC474834A8B734A3130CB0B35B9FF44D456792FB9AF45F3C318
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10799756

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

boot_logger.pdb

kernel32

GetConsoleMode WriteConsoleW GetConsoleOutputCP MultiByteToWideChar GetProcAddress GetModuleFileNameW GetExitCodeProcess GetProcessTimes LoadLibraryW GetSystemTimes DeleteFileW GetVolumeInformationW GetFinalPathNameByHandleW ReleaseMutex GetDriveTypeW GetVolumePathNamesForVolumeNameW FindVolumeClose FindNextVolumeW FindFirstVolumeW GetFileAttributesW GetDiskFreeSpaceExW DeviceIoControl CreateFileW VirtualQueryEx GetTickCount64 K32GetPerformanceInfo GlobalMemoryStatusEx CreateMutexA GetSystemInfo SetHandleInformation LocalFree WaitForSingleObject CreateEventW WaitForMultipleObjects GetCurrentProcessId LoadLibraryA GetModuleHandleW WaitForSingleObjectEx OpenProcess WideCharToMultiByte SwitchToThread GetCurrentProcess FreeLibrary CloseHandle GetSystemTimeAsFileTime FormatMessageW SetNamedPipeHandleState LoadLibraryExA GetLastError DuplicateHandle FindClose FindFirstFileExW CreateIoCompletionPort SetFileCompletionNotificationModes PostQueuedCompletionStatus ReadFile GetOverlappedResult WriteFile CancelIoEx GetQueuedCompletionStatusEx InitializeSListHead IsDebuggerPresent Sleep GetModuleHandleA GetTimeZoneInformationForYear UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetProcessIoCounters lstrlenW GetTempPathW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee ReadProcessMemory CreateToolhelp32Snapshot Process32FirstW GetComputerNameExW AddVectoredExceptionHandler HeapFree Process32NextW GetStdHandle GetEnvironmentStringsW TerminateProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle CancelIo GetSystemTimePreciseAsFileTime RtlLookupFunctionEntry GetProcessHeap RtlCaptureContext RtlVirtualUnwind CompareStringOrdinal FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle SetFileTime HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread ReadFileEx IsProcessorFeaturePresent

oleaut32

SysFreeString GetErrorInfo SysStringLen

advapi32

GetLengthSid CopySid IsValidSid SystemFunction036 RegOpenKeyExW RegQueryValueExW RegSetValueExW OpenProcessToken RegGetValueW GetTokenInformation RegCloseKey

psapi

GetProcessMemoryInfo GetModuleFileNameExW

ws2_32

bind WSASocketW send recv getsockopt ioctlsocket WSASend getsockname closesocket WSAGetLastError shutdown getpeername setsockopt connect freeaddrinfo WSACleanup WSAStartup WSAIoctl getaddrinfo

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

secur32

DeleteSecurityContext FreeContextBuffer ApplyControlToken AcceptSecurityContext FreeCredentialsHandle InitializeSecurityContextW EncryptMessage DecryptMessage QueryContextAttributesW AcquireCredentialsHandleA

pdh

PdhOpenQueryW PdhCollectQueryData PdhCloseQuery PdhAddEnglishCounterW PdhEnumObjectsW PdhRemoveCounter PdhGetFormattedCounterValue

powrprof

CallNtPowerInformation

iphlpapi

GetIfTable2 FreeMibTable GetAdaptersAddresses

ntdll

NtQueryInformationProcess NtDeviceIoControlFile NtCreateNamedPipeFile NtCancelIoFileEx NtCreateFile NtReadFile NtWriteFile RtlNtStatusToDosError NtOpenFile RtlGetVersion

shell32

CommandLineToArgvW

crypt32

CertAddCertificateContextToStore CertCloseStore CertDuplicateStore CertVerifyCertificateChainPolicy CertFreeCertificateChain CertDuplicateCertificateChain CertEnumCertificatesInStore CertGetCertificateChain CertOpenStore CertFreeCertificateContext CertDuplicateCertificateContext

bcrypt

BCryptGenRandom

bcryptprimitives

ProcessPrng

user32

EnumDisplayMonitors GetMonitorInfoW EnumDisplaySettingsW ReleaseDC GetDesktopWindow GetWindowDC GetDisplayConfigBufferSizes QueryDisplayConfig DisplayConfigGetDeviceInfo

gdi32

BitBlt SelectObject GetDIBits CreateCompatibleBitmap CreateCompatibleDC GetDeviceCaps CreateDCW DeleteObject DeleteDC

vcruntime140

memcpy __CxxFrameHandler3 memcmp memmove __current_exception_context __current_exception __C_specific_handler _CxxThrowException memset

api-ms-win-crt-math-l1-1-0

pow __setusermatherr

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-heap-l1-1-0

realloc _set_new_mode free

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _get_initial_narrow_environment _set_app_type _seh_filter_exe _initterm _initterm_e exit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _register_onexit_function _initialize_narrow_environment terminate _crt_atexit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_e7adc717cc25f304810a702a9dfcf8df_akira_glassworm_rusty-stealer

kernel32

oleaut32

advapi32

psapi

ws2_32

api-ms-win-core-synch-l1-2-0

secur32

pdh

powrprof

iphlpapi

ntdll

shell32

crypt32

bcrypt

bcryptprimitives

user32

gdi32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic