2026-08-02_5030fa8a0b47d929ed55b25cef8ba6be_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_5030fa8a0b47d929ed55b25cef8ba6be_akira_glassworm_rusty-stealer
Size 75.0MB
Sample260802-dpnb8scl6x
SHA256 839f70b44cd89dbd17384cc2d35ad9f9b96e19bda06481525f8f6b9e731f85b4
MD5 5030fa8a0b47d929ed55b25cef8ba6be
SHA1 ffe6e9391d87d22e7f92a70a19953ec2218b55cf
SHA512 ea727a38feece6ab60a9ff4924d25dbc76e61947e39b655a9a86b3e1c875be7d11ca8f22eb6ae0046ed86b7fa874edc2cfe27d11855cd137a5507b4faaa6e594
SSDEEP 1572864:Y8KFJ7AT0WkBx7WrLpPTv7HGp0NWlWHLsXj5yS0eBrk67qlRqjfTq:+FJoTQq1LkcW8rmyLeYlifu
TLSH
T163083343FAA691EDC15AC179861A6223FB72B84D072077EB56908A313F53BE01FBD714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-02_5030fa8a0b47d929ed55b25cef8ba6be_akira_glassworm_rusty-stealer

File Explorer

2026-08-02_5030fa8a0b47d929ed55b25cef8ba6be_akira_glassworm_rusty-stealer

.exe 75.0MB

2026-08-02_5030fa8a0b47d929ed55b25cef8ba6be_akira_glassworm_rusty-stealer

IMPHASH 9a6c0201e2778ae634b23b923ec26408
SHA256 839f70b44cd89dbd17384cc2d35ad9f9b96e19bda06481525f8f6b9e731f85b4
MD5 5030fa8a0b47d929ed55b25cef8ba6be
SHA1 ffe6e9391d87d22e7f92a70a19953ec2218b55cf
SHA512 ea727a38feece6ab60a9ff4924d25dbc76e61947e39b655a9a86b3e1c875be7d11ca8f22eb6ae0046ed86b7fa874edc2cfe27d11855cd137a5507b4faaa6e594
SSDEEP 1572864:Y8KFJ7AT0WkBx7WrLpPTv7HGp0NWlWHLsXj5yS0eBrk67qlRqjfTq:+FJoTQq1LkcW8rmyLeYlifu
TLSH
T163083343FAA691EDC15AC179861A6223FB72B84D072077EB56908A313F53BE01FBD714
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c8:5c:f3:68:73:a7:56:2b:1d:e4:1a:df:75:ef:1e:e7:b5:ef:4a:be:85:15:51:42:b9:7e:7a:5e:9c:47:75:a3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility

Chains

Jul 31, 2026

CN=Microsoft Windows Software Compatibility

Minor OS version

Major OS version

Entry point

3953520

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

spongebob_launcher.pdb

kernel32

CreateWaitableTimerExW SetWaitableTimer Sleep ExitProcess CreateEventW CancelIo GetOverlappedResult ReadFile GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle SetHandleInformation WaitForMultipleObjects GetExitCodeProcess GetTempPathW GetModuleFileNameW GetFileInformationByHandleEx GetFileInformationByHandle SetFileInformationByHandle SetFileTime CreateFileW FindFirstFileExW LoadLibraryExA FreeLibrary GetFullPathNameW CreateDirectoryW HeapAlloc ReleaseMutex CreateMutexA LoadLibraryA WaitForSingleObjectEx PostQueuedCompletionStatus AddVectoredExceptionHandler QueryPerformanceCounter GetFinalPathNameByHandleW SetLastError SetFileCompletionNotificationModes CreateIoCompletionPort GetCurrentThreadId WriteFileEx SleepEx GetCurrentProcessId SetFilePointerEx GetSystemTimePreciseAsFileTime CopyFileExW FindNextFileW GetProcessHeap FindClose GetCurrentProcess GetModuleHandleA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetCurrentDirectoryW lstrlenW WideCharToMultiByte ReadFileEx GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW GetEnvironmentVariableW FormatMessageW QueryPerformanceFrequency GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal TerminateProcess FlushFileBuffers GetTickCount MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime GetFileSize LockFileEx LocalFree UnlockFile HeapDestroy HeapCompact LoadLibraryW GetSystemInfo DeleteFileA CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapSize HeapValidate UnmapViewOfFile CreateMutexW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile HeapCreate AreFileApisANSI RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection IsProcessorFeaturePresent GetQueuedCompletionStatusEx GetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeSListHead SwitchToThread WaitForSingleObject HeapReAlloc GetCurrentThread SetThreadStackGuarantee GetLastError CloseHandle CreateThread HeapFree GetProcAddress DeleteFileW GetModuleHandleW IsDebuggerPresent

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

bcryptprimitives

ProcessPrng

ws2_32

WSASocketW WSACleanup ioctlsocket getaddrinfo freeaddrinfo WSAIoctl setsockopt send shutdown closesocket WSASend WSAStartup connect getpeername getsockopt recv getsockname WSAGetLastError bind

ntdll

NtDeviceIoControlFile NtCancelIoFileEx NtWriteFile NtReadFile NtOpenFile NtCreateFile RtlNtStatusToDosError NtCreateNamedPipeFile

secur32

QueryContextAttributesW InitializeSecurityContextW FreeContextBuffer DeleteSecurityContext FreeCredentialsHandle EncryptMessage DecryptMessage ApplyControlToken AcceptSecurityContext AcquireCredentialsHandleA

crypt32

CertGetCertificateChain CertOpenStore CertVerifyCertificateChainPolicy CertDuplicateCertificateContext CertDuplicateStore CertCloseStore CertEnumCertificatesInStore CertDuplicateCertificateChain CertAddCertificateContextToStore CertFreeCertificateChain CertFreeCertificateContext

oleaut32

SysStringLen GetErrorInfo SysFreeString

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW

shell32

ShellExecuteW SHGetKnownFolderPath

user32

ReleaseDC SetProcessDPIAware EnumDisplayMonitors GetDC

gdi32

DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC DeleteDC GetDIBits

vcruntime140

memcpy memset __current_exception_context __current_exception __CxxFrameHandler3 __C_specific_handler strrchr memmove memcmp

api-ms-win-crt-string-l1-1-0

strcmp strlen strspn strncmp strcspn wcslen

api-ms-win-crt-heap-l1-1-0

_set_new_mode realloc _msize free malloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initialize_narrow_environment _initterm _endthreadex _set_app_type _configure_narrow_argv _crt_atexit exit _exit __p___argc __p___argv _cexit _register_onexit_function _initialize_onexit_table _c_exit _initterm_e _seh_filter_exe terminate _beginthreadex _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr log

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_5030fa8a0b47d929ed55b25cef8ba6be_akira_glassworm_rusty-stealer

PE Signature issue

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ws2_32

ntdll

secur32

crypt32

oleaut32

advapi32

shell32

user32

gdi32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic