2026-08-03_fecb21bfdbe247be647ffb2452c5ab00_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_fecb21bfdbe247be647ffb2452c5ab00_akira_glassworm_rusty-stealer
Size 110.0MB
Sample260803-cffqcsaf94
SHA256 40fab185dec4e5b1d6a86bca557d68f48013c8d4036d0c8d927ddcf2a1e250af
MD5 fecb21bfdbe247be647ffb2452c5ab00
SHA1 0a96976a41b6c0bd96d0322666540d3e264c9291
SHA512 97cbea3b17addb3d218dc296db71adf64658bdbea7ef1bc24753c19cbe73ec526ad8d29851d464e7be6f362eb77a32c7a3b120786f012d00dfbbb00f37e642b9
SSDEEP 98304:o7z9eNpO72TMBmwbxJRWCLyBr5AOo5xqHwQMRqefwHDm9tRhI:UDHhI
TLSH
T109489E97E6A19BD95902C68DF582AAE17F8DFB143130A3044F4FE035494DF62BE44A3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-03_fecb21bfdbe247be647ffb2452c5ab00_akira_glassworm_rusty-stealer

File Explorer

2026-08-03_fecb21bfdbe247be647ffb2452c5ab00_akira_glassworm_rusty-stealer

.exe 110.0MB

2026-08-03_fecb21bfdbe247be647ffb2452c5ab00_akira_glassworm_rusty-stealer

IMPHASH a0681bba04e5c225681d00aadf8b89bd
SHA256 40fab185dec4e5b1d6a86bca557d68f48013c8d4036d0c8d927ddcf2a1e250af
MD5 fecb21bfdbe247be647ffb2452c5ab00
SHA1 0a96976a41b6c0bd96d0322666540d3e264c9291
SHA512 97cbea3b17addb3d218dc296db71adf64658bdbea7ef1bc24753c19cbe73ec526ad8d29851d464e7be6f362eb77a32c7a3b120786f012d00dfbbb00f37e642b9
SSDEEP 98304:o7z9eNpO72TMBmwbxJRWCLyBr5AOo5xqHwQMRqefwHDm9tRhI:UDHhI
TLSH
T109489E97E6A19BD95902C68DF582AAE17F8DFB143130A3044F4FE035494DF62BE44A3B
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

66:fd:7d:27:95:2f:fc:b9:86:c9:e9:bc:cc:d2:1b:c9:36:1f:81:34:f7:aa:76:96:17:1f:a0:f6:75:9c:dd:f8

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Andreas Schindel,O=Schindel Software GmbH,L=MÃ¼nchen,ST=Bayern,C=DE

Chains

Jul 31, 2026

CN=Andreas Schindel,O=Schindel Software GmbH,L=MÃ¼nchen,ST=Bayern,C=DE

Minor OS version

Major OS version

Entry point

4416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

mfplat

MFCreateMediaType MFShutdown MFStartup

propsys

PSCreateSimplePropertyChange PSGetPropertyValue

shlwapi

PathCombineW PathIsURLW SHLoadIndirectString StrCmpW

gdiplus

GdipCreateBitmapFromFile GdipDisposeImage GdipGetImageHeight GdipGetImageWidth GdiplusShutdown GdiplusStartup

avrt

AvRevertMmThreadCharacteristics AvSetMmThreadCharacteristicsW

msimg32

AlphaBlend GradientFill

winmm

mciSendStringW timeGetTime waveOutGetNumDevs

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

wintrust

CryptCATAdminCalcHashFromFileHandle WinVerifyTrust

crypt32

CertCloseStore CertFindCertificateInStore CertOpenSystemStoreW

dwmapi

DwmIsCompositionEnabled DwmSetWindowAttribute

uxtheme

CloseThemeData GetThemeColor GetThemeMetric IsAppThemed IsThemeActive IsThemePartDefined

shcore

GetDpiForMonitor

user32

BeginPaint CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW DrawIcon DrawTextW EndPaint FillRect GetClientRect GetDC GetDesktopWindow GetDpiForSystem GetForegroundWindow GetMessageW GetMonitorInfoW GetSystemMetrics InvalidateRect IsGUIThread KillTimer LoadCursorW LoadIconW MessageBoxW MonitorFromWindow PostMessageW PostQuitMessage RegisterClassExW ReleaseDC SetCursorPos SetForegroundWindow SetTimer ShowWindow SystemParametersInfoW TranslateMessage UpdateWindow

ole32

CoCreateGuid CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoUninitialize PropVariantClear StringFromGUID2

iphlpapi

GetAdaptersAddresses GetAdaptersInfo GetBestInterface GetIpStatistics GetNetworkParams GetTcpTable GetUdpTable

kernel32

AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CopyFileExW CreateDirectoryW CreateEventW CreateFileA CreateFileMappingA CreateFileW CreateMutexW CreateNamedPipeW CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DeleteFileW DuplicateHandle EnterCriticalSection FindClose FindFirstFileExW FindNextFileW FormatMessageW FreeEnvironmentStringsW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetDiskFreeSpaceExW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetLocaleInfoW GetLogicalDrives GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetProcessId GetStdHandle GetSystemDefaultLangID GetSystemDirectoryW GetSystemInfo GetSystemTimePreciseAsFileTime GetTickCount64 GetTimeZoneInformation GetUserDefaultLocaleName GetUserDefaultUILanguage GetWindowsDirectoryW GlobalAlloc GlobalLock GlobalMemoryStatusEx GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection LeaveCriticalSection MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency ReadFile ReadFileEx RtlCaptureContext RtlLookupFunctionEntry RtlRestoreContext RtlUnwindEx RtlVirtualUnwind SetFileInformationByHandle SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TlsGetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WriteConsoleW WriteFileEx __C_specific_handler

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateFontW CreatePen CreateSolidBrush DeleteDC DeleteObject Ellipse GetDIBits GetDeviceCaps GetStockObject RoundRect SelectObject SetBkMode SetTextColor

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

advapi32

RegCloseKey RegCreateKeyExW RegDeleteTreeW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

ntdll

ZwReadFile ZwWriteFile RtlNtStatusToDosError

shell32

ShellExecuteA

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr log2

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p___wargv _cexit _configure_narrow_argv _configure_wide_argv _crt_at_quick_exit _crt_atexit _exit _initialize_narrow_environment _initialize_wide_environment _initterm _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf fflush fwrite

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron getenv

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _tzset

Name

.txt0

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdt1

Size

343KB

Virtual Size

343KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.dat0

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdat

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls0

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

936B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rlc0

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.mdat

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_fecb21bfdbe247be647ffb2452c5ab00_akira_glassworm_rusty-stealer

PE Signature issue

mfplat

propsys

shlwapi

gdiplus

avrt

msimg32

winmm

version

wintrust

crypt32

dwmapi

uxtheme

shcore

user32

ole32

iphlpapi

kernel32

gdi32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

advapi32

ntdll

shell32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

generic