2026-07-30_a964cbffc1a8eeb419af6ea4e550a3dd_akira_glassworm_quasar-rat_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_a964cbffc1a8eeb419af6ea4e550a3dd_akira_glassworm_quasar-rat_rusty-stealer
Size 17.8MB
Sample260730-frf22sdj2x
SHA256 fc4b82d4e3cfcd1ec623879a167925e5f78dd06afb3314572398b8d797b8ca94
MD5 a964cbffc1a8eeb419af6ea4e550a3dd
SHA1 60e3b686b0d0cb6acd30ace00b0623c44a2a881c
SHA512 558c1531ba6dcf4b1edc5eb023f69553a933864115b2db83d76d7ac1439f8f4fa342002864882c084e7afd2e6bfca163378312bb7969d6070b4ffdb441d7f34e
SSDEEP 98304:xqltFNMg72k0+L3B4v6lgiKf8RW88zefJLRcjD2FXjpLN7z8BadOh8W1:klBFpl8zehyjD2FXjpLN7zeBGW
TLSH
T1FF172A157B8A68ACC19AC47083464A635A2134DB0B36F9FF55CC92392F79EF46E3D708
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_a964cbffc1a8eeb419af6ea4e550a3dd_akira_glassworm_quasar-rat_rusty-stealer

File Explorer

2026-07-30_a964cbffc1a8eeb419af6ea4e550a3dd_akira_glassworm_quasar-rat_rusty-stealer

.exe 17.8MB

2026-07-30_a964cbffc1a8eeb419af6ea4e550a3dd_akira_glassworm_quasar-rat_rusty-stealer

IMPHASH 102b03704254bd17ea55fab7c99e5b40
SHA256 fc4b82d4e3cfcd1ec623879a167925e5f78dd06afb3314572398b8d797b8ca94
MD5 a964cbffc1a8eeb419af6ea4e550a3dd
SHA1 60e3b686b0d0cb6acd30ace00b0623c44a2a881c
SHA512 558c1531ba6dcf4b1edc5eb023f69553a933864115b2db83d76d7ac1439f8f4fa342002864882c084e7afd2e6bfca163378312bb7969d6070b4ffdb441d7f34e
SSDEEP 98304:xqltFNMg72k0+L3B4v6lgiKf8RW88zefJLRcjD2FXjpLN7z8BadOh8W1:klBFpl8zehyjD2FXjpLN7zeBGW
TLSH
T1FF172A157B8A68ACC19AC47083464A635A2134DB0B36F9FF55CC92392F79EF46E3D708
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12714816

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_build-b167289c77f43eab.pdb

kernel32

GetLastError FormatMessageW GetProcessHeap LoadLibraryExA GetProcAddress DuplicateHandle HeapAlloc CloseHandle HeapFree SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent FindNextFileW GetModuleHandleA GetModuleHandleW GetConsoleOutputCP GetConsoleMode WriteConsoleW MultiByteToWideChar ReadConsoleW GetModuleFileNameW GetSystemInfo VirtualProtect CreateFileMappingW UnmapViewOfFile MapViewOfFile GetCurrentProcess WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread GetCurrentProcessId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetFileInformationByHandle GetFileInformationByHandleEx GetStdHandle SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW FindFirstFileExW FindClose SwitchToThread WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex

dwrite

DWriteCreateFactory

oleaut32

SysStringLen SysFreeString GetErrorInfo

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

bcryptprimitives

ProcessPrng

ntdll

NtWriteFile NtReadFile RtlNtStatusToDosError

vcruntime140

__C_specific_handler _CxxThrowException __current_exception memmove memcmp memcpy __CxxFrameHandler3 __current_exception_context memset

api-ms-win-crt-math-l1-1-0

pow atan2 tan _hypotf acos floor log2 sin cos truncf __setusermatherr powf fmod atan2f round ceil ceilf tanf sinf cosf fmodf trunc floorf roundf expf acosf

api-ms-win-crt-runtime-l1-1-0

exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm_e _initialize_onexit_table _register_onexit_function _initterm _get_initial_narrow_environment _crt_atexit _exit terminate _initialize_narrow_environment _configure_narrow_argv _set_app_type _seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_a964cbffc1a8eeb419af6ea4e550a3dd_akira_glassworm_quasar-rat_rusty-stealer

kernel32

dwrite

oleaut32

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic