2026-07-27_9499de49a7d7871aa7492be16cacb3ce_akira_glassworm_quasar-rat_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-27_9499de49a7d7871aa7492be16cacb3ce_akira_glassworm_quasar-rat_rusty-stealer
Size 3.2MB
Sample260727-yp72vs1th1
SHA256 080b3421793ada13200eab78b094a87178d21d1bb73b3a4a776167e4873a5d8b
MD5 9499de49a7d7871aa7492be16cacb3ce
SHA1 68f307dd6eb5ad981e8ce83efa4d53894b8dbde7
SHA512 6444235a3f1592bfb8061ee1716aea674c68a45fce6d3f029404cb34754dccc11e5469ddd408e5f08ce1fbd412a4c50e513adf8703fba6df01071b03868480d8
SSDEEP 49152:90syCDYcaAX4rXRGVJ8lbiYCB7LW2XERDx+REu49LUlMnZbaiWI9yNWM3hI:6qcfXusglsaieWWh
TLSH
T148F5E743E7E2D1A8C065D1B883496232FB35BC8DD63635E75BE44A313E90BD0AA3DB45
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-27_9499de49a7d7871aa7492be16cacb3ce_akira_glassworm_quasar-rat_rusty-stealer

File Explorer

2026-07-27_9499de49a7d7871aa7492be16cacb3ce_akira_glassworm_quasar-rat_rusty-stealer

.exe 3.2MB

2026-07-27_9499de49a7d7871aa7492be16cacb3ce_akira_glassworm_quasar-rat_rusty-stealer

IMPHASH d9103e9fdb52790bcc6e34256a4d6b43
SHA256 080b3421793ada13200eab78b094a87178d21d1bb73b3a4a776167e4873a5d8b
MD5 9499de49a7d7871aa7492be16cacb3ce
SHA1 68f307dd6eb5ad981e8ce83efa4d53894b8dbde7
SHA512 6444235a3f1592bfb8061ee1716aea674c68a45fce6d3f029404cb34754dccc11e5469ddd408e5f08ce1fbd412a4c50e513adf8703fba6df01071b03868480d8
SSDEEP 49152:90syCDYcaAX4rXRGVJ8lbiYCB7LW2XERDx+REu49LUlMnZbaiWI9yNWM3hI:6qcfXusglsaieWWh
TLSH
T148F5E743E7E2D1A8C065D1B883496232FB35BC8DD63635E75BE44A313E90BD0AA3DB45
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

mfplat

MFCreateAsyncResult MFCreateMediaType MFCreateSourceResolver MFShutdown MFStartup

mfreadwrite

MFCreateSinkWriterFromURL MFCreateSourceReaderFromURL

dwrite

DWriteCreateFactory

d2d1

D2D1CreateFactory

winmm

mciSendStringW timeGetTime waveOutGetNumDevs

dwmapi

DwmIsCompositionEnabled DwmSetWindowAttribute

uxtheme

CloseThemeData GetThemeColor GetThemeMetric IsAppThemed IsThemeActive IsThemePartDefined

shcore

GetDpiForMonitor

user32

BeginPaint CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW DrawTextW EmptyClipboard EndPaint FillRect GetClientRect GetClipboardData GetDC GetDesktopWindow GetDpiForSystem GetForegroundWindow GetLastInputInfo GetMonitorInfoW GetSystemMetrics InvalidateRect IsClipboardFormatAvailable IsGUIThread KillTimer LoadCursorW LockWorkStation MessageBoxW MonitorFromWindow OpenClipboard PeekMessageW PostMessageW PostQuitMessage RegisterClassExW ReleaseDC SendInput SetClipboardData SetCursorPos SetTimer ShowWindow SystemParametersInfoW TranslateMessage UpdateWindow

ole32

CoCreateGuid CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoUninitialize GetErrorInfo StringFromGUID2

iphlpapi

GetAdaptersAddresses GetAdaptersInfo GetBestInterface GetIpStatistics GetNetworkParams GetTcpTable GetUdpTable

kernel32

AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CopyFileExW CreateDirectoryW CreateEventW CreateFileA CreateFileMappingA CreateFileW CreateMutexW CreateNamedPipeW CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DeleteFileW DuplicateHandle EnterCriticalSection FindClose FindFirstFileExW FindNextFileW FormatMessageW FreeEnvironmentStringsW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetDiskFreeSpaceExW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetLocaleInfoW GetLogicalDrives GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetProcessId GetStdHandle GetSystemDefaultLangID GetSystemDirectoryW GetSystemInfo GetSystemTimePreciseAsFileTime GetTickCount GetTickCount64 GetTimeZoneInformation GetUserDefaultLocaleName GetUserDefaultUILanguage GetWindowsDirectoryW GlobalAlloc GlobalLock GlobalMemoryStatusEx GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection LeaveCriticalSection MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency ReadFile ReadFileEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetFileInformationByHandle SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TlsGetValue UnmapViewOfFile VirtualProtect VirtualQuery VirtualQueryEx WaitForMultipleObjects WaitForSingleObject WriteConsoleW WriteFileEx __C_specific_handler

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateFontW CreateSolidBrush DeleteDC DeleteObject GetDIBits GetDeviceCaps GetStockObject SelectObject SetBkMode SetTextColor

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

advapi32

RegCloseKey RegCreateKeyExW RegDeleteTreeW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

shell32

ShellExecuteA

libunwind

_GCC_specific_handler _Unwind_DeleteException _Unwind_GetDataRelBase _Unwind_GetIPInfo _Unwind_GetLanguageSpecificData _Unwind_GetRegionStart _Unwind_GetTextRelBase _Unwind_RaiseException _Unwind_Resume _Unwind_SetGR _Unwind_SetIP

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr log2 roundf

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p___wargv _cexit _configure_narrow_argv _configure_wide_argv _crt_at_quick_exit _crt_atexit _exit _initialize_narrow_environment _initialize_wide_environment _initterm _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf fwrite

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _tzset

Name

.text

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

503KB

Virtual Size

503KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-27_9499de49a7d7871aa7492be16cacb3ce_akira_glassworm_quasar-rat_rusty-stealer

mfplat

mfreadwrite

dwrite

d2d1

winmm

dwmapi

uxtheme

shcore

user32

ole32

iphlpapi

kernel32

gdi32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

advapi32

ntdll

shell32

libunwind

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

generic