2026-08-02_76b5ddbd8607c69f04378e6c1750b0b8_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_76b5ddbd8607c69f04378e6c1750b0b8_akira_glassworm_rusty-stealer
Size 75.0MB
Sample260802-grw9psea79
SHA256 6c360a5b611ebae12d05cdab3b0df50d16ed2f5be49cb2e67923da533667f730
MD5 76b5ddbd8607c69f04378e6c1750b0b8
SHA1 59f7598cb7d3d02cef1327912a9f8ffc850c6138
SHA512 83cb7cb6ca8c4652355b93098b3d97943505e73d70f2acdc069f7416f40bcb5ea60dd1ab559c6e2b19e6d6080631ae4957d9e48c71e9e34ac7b0ca002e728ca9
SSDEEP 1572864:e+sysAg7XAN6V+jNBSmlcGuLp86QDzikQeacIFWkT6FetXpmbuI4q:VQkN6anlcGop8lyfBFWkoePmbR4q
TLSH
T1BF083343FAA6A1EDC07AC07986065233FB72B84907306AEB569086353F57FE01EBD754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-02_76b5ddbd8607c69f04378e6c1750b0b8_akira_glassworm_rusty-stealer

File Explorer

2026-08-02_76b5ddbd8607c69f04378e6c1750b0b8_akira_glassworm_rusty-stealer

.exe 75.0MB

2026-08-02_76b5ddbd8607c69f04378e6c1750b0b8_akira_glassworm_rusty-stealer

IMPHASH 8ae4cdbec396d2a8bc3db1c4091fdebd
SHA256 6c360a5b611ebae12d05cdab3b0df50d16ed2f5be49cb2e67923da533667f730
MD5 76b5ddbd8607c69f04378e6c1750b0b8
SHA1 59f7598cb7d3d02cef1327912a9f8ffc850c6138
SHA512 83cb7cb6ca8c4652355b93098b3d97943505e73d70f2acdc069f7416f40bcb5ea60dd1ab559c6e2b19e6d6080631ae4957d9e48c71e9e34ac7b0ca002e728ca9
SSDEEP 1572864:e+sysAg7XAN6V+jNBSmlcGuLp86QDzikQeacIFWkT6FetXpmbuI4q:VQkN6anlcGop8lyfBFWkoePmbR4q
TLSH
T1BF083343FAA6A1EDC07AC07986065233FB72B84907306AEB569086353F57FE01EBD754
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

42:63:86:f6:82:ac:c0:40:05:23:24:de:2f:d2:21:b4:de:30:70:cd:27:73:4f:34:94:f6:79:46:4b:43:79:f8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility

Chains

Jul 31, 2026

CN=Microsoft Windows Software Compatibility

Minor OS version

Major OS version

Entry point

3782880

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

spongebob_launcher.pdb

kernel32

GetFileInformationByHandleEx FindNextFileW GetTempPathW FindClose GetCurrentProcess SetHandleInformation DeleteFileW WriteFileEx SleepEx ReadFileEx CreateWaitableTimerExW SetWaitableTimer Sleep ExitProcess CreateEventW CancelIo ReadFile SetFileInformationByHandle GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle GetModuleHandleA GetProcAddress GetModuleHandleW WaitForSingleObject CreateThread SetFileTime CreateFileW FindFirstFileExW GetFullPathNameW LoadLibraryExA FreeLibrary CreateDirectoryW HeapAlloc CopyFileExW ReleaseMutex WaitForSingleObjectEx GetCurrentThreadId GetFileInformationByHandle WaitForMultipleObjects AddVectoredExceptionHandler QueryPerformanceCounter CreateMutexA GetCurrentProcessId GetModuleFileNameW LoadLibraryA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetCurrentDirectoryW lstrlenW SetFilePointerEx GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW GetEnvironmentVariableW FormatMessageW QueryPerformanceFrequency GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetExitCodeProcess FlushFileBuffers GetTickCount MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime GetFileSize LockFileEx LocalFree UnlockFile HeapDestroy HeapCompact LoadLibraryW GetSystemInfo DeleteFileA CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapSize HeapValidate UnmapViewOfFile CreateMutexW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile HeapCreate AreFileApisANSI RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection PostQueuedCompletionStatus GetFinalPathNameByHandleW SetLastError SetFileCompletionNotificationModes CreateIoCompletionPort TerminateProcess IsProcessorFeaturePresent GetQueuedCompletionStatusEx CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeSListHead SwitchToThread GetLastError WideCharToMultiByte HeapReAlloc GetCurrentThread SetThreadStackGuarantee GetSystemTimePreciseAsFileTime HeapFree GetOverlappedResult GetProcessHeap IsDebuggerPresent

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

bcryptprimitives

ProcessPrng

ws2_32

WSASocketW ioctlsocket getsockopt getpeername WSAStartup WSAIoctl setsockopt getaddrinfo freeaddrinfo closesocket recv send shutdown WSACleanup WSASend bind getsockname WSAGetLastError connect

ntdll

NtDeviceIoControlFile NtCancelIoFileEx NtCreateNamedPipeFile NtWriteFile NtReadFile NtCreateFile RtlNtStatusToDosError NtOpenFile

secur32

QueryContextAttributesW DeleteSecurityContext EncryptMessage DecryptMessage ApplyControlToken FreeCredentialsHandle FreeContextBuffer AcquireCredentialsHandleA AcceptSecurityContext InitializeSecurityContextW

crypt32

CertCloseStore CertDuplicateCertificateChain CertDuplicateStore CertFreeCertificateContext CertEnumCertificatesInStore CertAddCertificateContextToStore CertGetCertificateChain CertFreeCertificateChain CertVerifyCertificateChainPolicy CertOpenStore CertDuplicateCertificateContext

oleaut32

GetErrorInfo SysFreeString SysStringLen

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW

shell32

SHGetKnownFolderPath

vcruntime140

strrchr __current_exception memcmp memset __CxxFrameHandler3 memcpy memmove __current_exception_context __C_specific_handler

api-ms-win-crt-string-l1-1-0

strcspn strspn strlen strcmp wcslen strncmp

api-ms-win-crt-heap-l1-1-0

free _set_new_mode _msize malloc realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_endthreadex _beginthreadex _c_exit terminate _seh_filter_exe _crt_atexit _cexit _set_app_type __p___argv _configure_narrow_argv _initialize_narrow_environment _register_onexit_function _initialize_onexit_table exit __p___argc _register_thread_local_exe_atexit_callback _exit _initterm_e _get_initial_narrow_environment _initterm

api-ms-win-crt-math-l1-1-0

__setusermatherr log

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_76b5ddbd8607c69f04378e6c1750b0b8_akira_glassworm_rusty-stealer

PE Signature issue

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ws2_32

ntdll

secur32

crypt32

oleaut32

advapi32

shell32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic