2026-07-27_684e0412ff9f0cf5a16dac04323c06cd_akira_glassworm_quasar-rat_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-27_684e0412ff9f0cf5a16dac04323c06cd_akira_glassworm_quasar-rat_rusty-stealer
Size 110.0MB
Sample260727-lfsvcscm5x
SHA256 e74f648e1cef85a3a95fc783401e74f5ca94a98b8963792927a09f15a9f0930f
MD5 684e0412ff9f0cf5a16dac04323c06cd
SHA1 38f249aa800cd21ba1a555088d21e65730e7d4ee
SHA512 c8736ac9bc242951a4af09179d84eb409114952fc91e21148da1a672de40fe94d7618923510e3a882ee269d2364ecb94a0e2bb9459688843d688025bc213cf2e
SSDEEP 3145728:pXF9t+zZmUlMdKM2gDM+IbDvQUVvgg5e:AcqcKL+Iggo
TLSH
T1EC483343E5A2D0F9C16AC0B993166232FB72BC4D4B323AEB17D48A352D51FD06A3DB15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-27_684e0412ff9f0cf5a16dac04323c06cd_akira_glassworm_quasar-rat_rusty-stealer

File Explorer

2026-07-27_684e0412ff9f0cf5a16dac04323c06cd_akira_glassworm_quasar-rat_rusty-stealer

.exe 110.0MB

2026-07-27_684e0412ff9f0cf5a16dac04323c06cd_akira_glassworm_quasar-rat_rusty-stealer

IMPHASH 5aed70c0595de28ce4d37f2528b77b2a
SHA256 e74f648e1cef85a3a95fc783401e74f5ca94a98b8963792927a09f15a9f0930f
MD5 684e0412ff9f0cf5a16dac04323c06cd
SHA1 38f249aa800cd21ba1a555088d21e65730e7d4ee
SHA512 c8736ac9bc242951a4af09179d84eb409114952fc91e21148da1a672de40fe94d7618923510e3a882ee269d2364ecb94a0e2bb9459688843d688025bc213cf2e
SSDEEP 3145728:pXF9t+zZmUlMdKM2gDM+IbDvQUVvgg5e:AcqcKL+Iggo
TLSH
T1EC483343E5A2D0F9C16AC0B993166232FB72BC4D4B323AEB17D48A352D51FD06A3DB15
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dwmapi

DwmEnableBlurBehindWindow DwmExtendFrameIntoClientArea DwmGetWindowAttribute DwmIsCompositionEnabled DwmSetWindowAttribute

uxtheme

CloseThemeData GetThemeColor GetThemeMetric IsAppThemed IsThemeActive IsThemePartDefined

winmm

mciSendStringA mixerGetNumDevs timeBeginPeriod timeEndPeriod timeGetTime waveOutGetNumDevs

shcore

GetDpiForMonitor GetProcessDpiAwareness GetScaleFactorForMonitor SetProcessDpiAwareness

comctl32

InitCommonControlsEx LoadIconMetric TaskDialogIndirect

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

ole32

CoCreateGuid CoCreateInstance CoGetClassObject CoInitializeEx CoTaskMemFree CoUninitialize StringFromGUID2

oleaut32

SafeArrayCreateVector SafeArrayDestroy SysAllocString SysFreeString SysStringLen VariantClear VariantCopy VariantInit

shlwapi

PathCombineW PathFileExistsW PathFindExtensionW PathFindFileNameW PathIsDirectoryW PathStripPathW StrCmpIW StrStrIW

iphlpapi

GetAdaptersAddresses GetAdaptersInfo GetBestInterface GetIpStatistics GetNetworkParams GetTcpTable GetUdpTable

winspool.drv

ClosePrinter EnumPrintersW GetDefaultPrinterW OpenPrinterW

user32

CloseClipboard EmptyClipboard EnumWindows GetClipboardData GetDesktopWindow GetDpiForSystem GetDpiForWindow GetForegroundWindow GetMonitorInfoW GetSystemMetrics GetWindowTextLengthW IsClipboardFormatAvailable IsGUIThread LoadCursorW LockWorkStation MessageBoxW MonitorFromWindow OpenClipboard RegisterWindowMessageW SendInput SetClipboardData SetCursor SetCursorPos SetThreadDpiAwarenessContext SystemParametersInfoW

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcrypt

BCryptGenRandom

advapi32

RegCloseKey RegCreateKeyExW RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW SystemFunction036

kernel32

AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CopyFileExW CreateDirectoryW CreateEventW CreateFileA CreateFileMappingA CreateFileW CreateNamedPipeW CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DeleteFileW DuplicateHandle EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FormatMessageW FreeEnvironmentStringsW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetDiskFreeSpaceExW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetStdHandle GetSystemDirectoryW GetSystemTimePreciseAsFileTime GetUserDefaultLocaleName GetWindowsDirectoryW GlobalAlloc GlobalLock GlobalMemoryStatusEx GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar OpenProcess Process32FirstW Process32NextW QueryPerformanceCounter QueryPerformanceFrequency ReadFile ReadFileEx ReadProcessMemory RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetDllDirectoryW SetFileInformationByHandle SetHandleInformation SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx TlsGetValue UnmapViewOfFile VirtualProtect VirtualQuery VirtualQueryEx WaitForMultipleObjects WaitForSingleObject WriteConsoleW WriteFileEx __C_specific_handler

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

shell32

ShellExecuteA

ws2_32

WSACleanup WSADuplicateSocketW WSAGetLastError WSARecv WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv select send setsockopt

libunwind

_GCC_specific_handler _Unwind_DeleteException _Unwind_GetDataRelBase _Unwind_GetIPInfo _Unwind_GetLanguageSpecificData _Unwind_GetRegionStart _Unwind_GetTextRelBase _Unwind_RaiseException _Unwind_Resume _Unwind_SetGR _Unwind_SetIP

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr log2

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p___wargv _assert _cexit _configure_narrow_argv _configure_wide_argv _crt_at_quick_exit _crt_atexit _exit _initialize_narrow_environment _initialize_wide_environment _initterm _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf fwrite

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _tzset

Name

.text

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

797KB

Virtual Size

797KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-27_684e0412ff9f0cf5a16dac04323c06cd_akira_glassworm_quasar-rat_rusty-stealer

dwmapi

uxtheme

winmm

shcore

comctl32

version

ole32

oleaut32

shlwapi

iphlpapi

winspool.drv

user32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

bcrypt

advapi32

kernel32

ntdll

shell32

ws2_32

libunwind

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

generic