2026-08-06_411e6a0198ab7ffe301b8ff53d02c76a_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_411e6a0198ab7ffe301b8ff53d02c76a_akira_glassworm_rusty-stealer
Size 19.9MB
Sample260806-b32exafb85
SHA256 0faf51408c0a048cf943ea0209ab79ba62ade644cee709f80a2707397fb279d7
MD5 411e6a0198ab7ffe301b8ff53d02c76a
SHA1 cb80826a8eb2ed8e45e52de503d3f43962501203
SHA512 134ce71b89f98e179ca231f667f221bb9bd877d4c5c783d378d20b954d694cfc614144a187c7b13318f23a5187242a5e5058b6d7ee1d662b744b22cedd87a81b
SSDEEP 393216:p4CLGbsk+daPM7PiCsNQLxzj+/H6eHWdldzXv7:eCmb+gPMUQBq/rGdz/
TLSH
T11D27AE53F79151EDC12AC0748256A337E662BC59073479EB77E8AB202F22E907B3D748
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

themida

Malware Config

Signatures

Detects executables packed with Themida 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_Themida

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-06_411e6a0198ab7ffe301b8ff53d02c76a_akira_glassworm_rusty-stealer

File Explorer

2026-08-06_411e6a0198ab7ffe301b8ff53d02c76a_akira_glassworm_rusty-stealer

.exe 19.9MB

2026-08-06_411e6a0198ab7ffe301b8ff53d02c76a_akira_glassworm_rusty-stealer

SHA256 0faf51408c0a048cf943ea0209ab79ba62ade644cee709f80a2707397fb279d7
MD5 411e6a0198ab7ffe301b8ff53d02c76a
SHA1 cb80826a8eb2ed8e45e52de503d3f43962501203
SHA512 134ce71b89f98e179ca231f667f221bb9bd877d4c5c783d378d20b954d694cfc614144a187c7b13318f23a5187242a5e5058b6d7ee1d662b744b22cedd87a81b
SSDEEP 393216:p4CLGbsk+daPM7PiCsNQLxzj+/H6eHWdldzXv7:eCmb+gPMUQBq/rGdz/
TLSH
T11D27AE53F79151EDC12AC0748256A337E662BC59073479EB77E8AB202F22E907B3D748
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Detects executables packed with Themida
Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17616984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

6.9MB

Virtual Size

6.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.1MB

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

32KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

94KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

145KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

45KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.exports

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.imports

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.themida

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_411e6a0198ab7ffe301b8ff53d02c76a_akira_glassworm_rusty-stealer

generic