2026-08-01_af3617767c5a4f56a6c9a4c1a1375a3b_akira_glassworm_quasar-rat_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_af3617767c5a4f56a6c9a4c1a1375a3b_akira_glassworm_quasar-rat_rusty-stealer
Size 7.9MB
Sample260802-aa38cszeja
SHA256 b839b7276a13e87c31ad60df6cf694cc78e33bc97a7d2105b87114785fa40d6f
MD5 af3617767c5a4f56a6c9a4c1a1375a3b
SHA1 ca136016c58b0ffbc7c3193db2ef9c08e0f20a08
SHA512 c6b0520d94a6853d4bd3b2ca92c7d4610f099eac520f4ac11c7f0b871604b59ad6c73bc8e77897ebbe0804db6c2f5fc238b667eaffd0567b4b1293019a4d8f84
SSDEEP 98304:th+uexaFJkHy+z4tUtruBEorjY+fPPVaQxUAGVWvo4++IIKx:thqLH1VtCvNA3AGgRlIIKx
TLSH
T1C6867D43F26290FCC16AC074835BA232FA317C49093579FB66E49B353F65E906B2DB25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_af3617767c5a4f56a6c9a4c1a1375a3b_akira_glassworm_quasar-rat_rusty-stealer

File Explorer

2026-08-01_af3617767c5a4f56a6c9a4c1a1375a3b_akira_glassworm_quasar-rat_rusty-stealer

.exe 7.9MB

2026-08-01_af3617767c5a4f56a6c9a4c1a1375a3b_akira_glassworm_quasar-rat_rusty-stealer

IMPHASH 6f325e23ca857ea791367ae99e951ec4
SHA256 b839b7276a13e87c31ad60df6cf694cc78e33bc97a7d2105b87114785fa40d6f
MD5 af3617767c5a4f56a6c9a4c1a1375a3b
SHA1 ca136016c58b0ffbc7c3193db2ef9c08e0f20a08
SHA512 c6b0520d94a6853d4bd3b2ca92c7d4610f099eac520f4ac11c7f0b871604b59ad6c73bc8e77897ebbe0804db6c2f5fc238b667eaffd0567b4b1293019a4d8f84
SSDEEP 98304:th+uexaFJkHy+z4tUtruBEorjY+fPPVaQxUAGVWvo4++IIKx:thqLH1VtCvNA3AGgRlIIKx
TLSH
T1C6867D43F26290FCC16AC074835BA232FA317C49093579FB66E49B353F65E906B2DB25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3966064

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

SystemFunction036

bcrypt

BCryptGenRandom

kernel32

AddVectoredExceptionHandler CompareStringOrdinal CreateFileMappingA CreateFileMappingW CreateToolhelp32Snapshot DeleteCriticalSection EnterCriticalSection FlushViewOfFile FormatMessageA FormatMessageW FreeEnvironmentStringsW GetCommandLineW GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetModuleFileNameW GetModuleHandleW GetProcessHeap HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize HeapValidate InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar OpenFileMappingA OutputDebugStringA OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlRestoreContext RtlUnwindEx RtlVirtualUnwind SetUnhandledExceptionFilter SystemTimeToFileTime TryEnterCriticalSection UnmapViewOfFile VirtualProtect VirtualQuery WideCharToMultiByte AreFileApisANSI CloseHandle CreateDirectoryW CreateFileA CreateFileW CreateIoCompletionPort CreateMutexW CreateProcessW CreateThread CreateWaitableTimerExW DeleteFileA DeleteFileW DuplicateHandle ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeLibrary GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceA GetDiskFreeSpaceW GetExitCodeProcess GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSize GetFileType GetFinalPathNameByHandleW GetFullPathNameA GetFullPathNameW GetLastError GetModuleHandleA GetProcAddress GetQueuedCompletionStatusEx GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathA GetTempPathW GetTickCount GetWindowsDirectoryW InitOnceBeginInitialize InitOnceComplete LocalFree LockFile LockFileEx MoveFileExW PostQueuedCompletionStatus ReadFile ReadFileEx RegisterWaitForSingleObject SetConsoleCtrlHandler SetConsoleMode SetConsoleTextAttribute SetEndOfFile SetFileCompletionNotificationModes SetFileInformationByHandle SetFilePointer SetFilePointerEx SetFileTime SetHandleInformation SetLastError SetThreadStackGuarantee SetWaitableTimer Sleep SleepEx SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnlockFile UnlockFileEx UnregisterWaitEx WaitForSingleObject WaitForSingleObjectEx WriteConsoleW WriteFile WriteFileEx __C_specific_handler

bcryptprimitives

ProcessPrng

ntdll

NtCancelIoFileEx NtCreateFile NtCreateNamedPipeFile NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

ws2_32

WSACleanup WSADuplicateSocketW WSAGetLastError WSAIoctl WSARecv WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv select send setsockopt socket

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc realloc

api-ms-win-crt-math-l1-1-0

__setusermatherr atan2 hypot pow

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _beginthreadex _cexit _configure_narrow_argv _crt_atexit _endthreadex _exit _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf fflush fwrite

api-ms-win-crt-string-l1-1-0

strcmp strcspn strlen strncmp strspn

api-ms-win-crt-private-l1-1-0

memchr strrchr

api-ms-win-crt-time-l1-1-0

_localtime64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-environment-l1-1-0

__p__environ

Name

.text

Size

5.3MB

Virtual Size

5.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

21KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_af3617767c5a4f56a6c9a4c1a1375a3b_akira_glassworm_quasar-rat_rusty-stealer

advapi32

bcrypt

kernel32

bcryptprimitives

ntdll

ws2_32

api-ms-win-core-synch-l1-2-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

generic