2026-08-02_99b7beeaba8a04cc14eef00245800db0_akira_darkgate_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_99b7beeaba8a04cc14eef00245800db0_akira_darkgate_elex_glassworm
Size 24.2MB
Sample260802-j55jcaybpg
SHA256 85d44180d0ad69c3419e04ef3005ea368f7383054392ad5ff2212b5f5254788e
MD5 99b7beeaba8a04cc14eef00245800db0
SHA1 e97e47a3e65c2f5127e63c15037af4591d1a58af
SHA512 fd08c1b9bae8b908aeb280b5267dea363aafd20da74a6615b8d5b31d49017e0c1ed5d07a0055ee997684071ad9428c8f63385c0a23975b18681cd5c16bd2b947
SSDEEP 393216:TatCaPvjKoPRPEUBeMm1YTdsioWZgJvCXHRy6BCVos+DYHocxbZEUy:ZaPRPnBj5TdsiovCXgrIcny
TLSH
T164478E43F602A1FBC18B42F0F05DA3399732562553544DE3EA949EB82DB97D05E23B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_99b7beeaba8a04cc14eef00245800db0_akira_darkgate_elex_glassworm

File Explorer

2026-08-02_99b7beeaba8a04cc14eef00245800db0_akira_darkgate_elex_glassworm

.exe 24.2MB

2026-08-02_99b7beeaba8a04cc14eef00245800db0_akira_darkgate_elex_glassworm

IMPHASH d1aa0370f0fb7070b1b7112cd5c64e91
SHA256 85d44180d0ad69c3419e04ef3005ea368f7383054392ad5ff2212b5f5254788e
MD5 99b7beeaba8a04cc14eef00245800db0
SHA1 e97e47a3e65c2f5127e63c15037af4591d1a58af
SHA512 fd08c1b9bae8b908aeb280b5267dea363aafd20da74a6615b8d5b31d49017e0c1ed5d07a0055ee997684071ad9428c8f63385c0a23975b18681cd5c16bd2b947
SSDEEP 393216:TatCaPvjKoPRPEUBeMm1YTdsioWZgJvCXHRy6BCVos+DYHocxbZEUy:ZaPRPnBj5TdsiovCXgrIcny
TLSH
T164478E43F602A1FBC18B42F0F05DA3399732562553544DE3EA949EB82DB97D05E23B2E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19365440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

ruff.pdb

bcryptprimitives

ProcessPrng

kernel32

GetStringTypeW SetStdHandle DuplicateHandle SetEnvironmentVariableW GetCPInfo GetTimeZoneInformationForYear GetFileSizeEx CloseHandle GetBinaryTypeW GetLastError FlushFileBuffers GetDynamicTimeZoneInformation SetLastError FreeLibrary GetStdHandle GetConsoleMode SetConsoleMode GetConsoleScreenBufferInfo SetConsoleTextAttribute FindClose Sleep CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject QueryPerformanceFrequency QueryPerformanceCounter GetSystemInfo SwitchToThread GetFileInformationByHandle FindNextFileW WaitForSingleObjectEx CancelIo CreateFileW CreateSemaphoreW ReadDirectoryChangesW ReleaseSemaphore GetModuleHandleA GetProcAddress SetFileAttributesW MoveFileExW GetSystemTimePreciseAsFileTime VerSetConditionMask VerifyVersionInfoW GetOEMCP GetACP IsValidCodePage GetCommandLineW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetFilePointerEx SleepEx WriteFileEx WaitForMultipleObjects GetOverlappedResult GetExitCodeProcess lstrlenW GetCurrentThreadId GetCurrentProcess RtlCaptureContext ReleaseMutex GetCurrentDirectoryW LoadLibraryA GetCurrentProcessId CreateMutexA WideCharToMultiByte GetConsoleOutputCP MultiByteToWideChar WriteConsoleW GetProcessHeap HeapReAlloc HeapAlloc HeapFree GetEnvironmentVariableW ReadFileEx GetModuleHandleW FormatMessageW CreateThread GetFullPathNameW SetFileTime SetFileInformationByHandle FindFirstFileExW GetFileInformationByHandleEx ReadConsoleW CreateDirectoryW ExitProcess CreateEventW ReadFile GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetModuleFileNameW GetFinalPathNameByHandleW GetFileType DeleteFileW GetEnvironmentVariableA WriteFile InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetProcessTimes GetCurrentProcessorNumber VirtualAlloc VirtualProtect VirtualFree VirtualQuery GetModuleHandleExA WriteConsoleA LCMapStringW IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RaiseException RtlUnwind FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection TerminateProcess GetModuleHandleExW GetCommandLineA DecodePointer IsDebuggerPresent UnhandledExceptionFilter LoadLibraryExW CompareStringW HeapSize

shell32

SHGetKnownFolderPath

combase

CoTaskMemFree

ntdll

NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile

userenv

GetUserProfileDirectoryW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

advapi32

LookupPrivilegeValueA AdjustTokenPrivileges OpenProcessToken

netapi32

NetApiBufferAllocate NetServerGetInfo NetApiBufferFree NetWkstaGetInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_99b7beeaba8a04cc14eef00245800db0_akira_darkgate_elex_glassworm

bcryptprimitives

kernel32

shell32

combase

ntdll

userenv

api-ms-win-core-synch-l1-2-0

advapi32

netapi32

generic