2026-08-09_11a81cca991d5996d8a84f588416bfdf_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_11a81cca991d5996d8a84f588416bfdf_akira_glassworm_rusty-stealer
Size 870KB
Sample260809-vramlavzcv
SHA256 28277f04f882928bc2eddaf29f9ecd0605a939e9952b53e5c629a5d9f2b1b43e
MD5 11a81cca991d5996d8a84f588416bfdf
SHA1 56a8952483374ef006cb6cd4a1672bba5466fe06
SHA512 e9d7e748959b4c9aa0761fe3175d5b419960c6ce6ebb318a89ace98baffe2321a2865083225ad3f57bb2a40e8e10ced06650777a792d33dccc185b68f774c96d
SSDEEP 12288:wjDPb4JB7FrnmGcbqKlZWnZQnyB4FmE4CXQ+twdYFTvjrDHc5VE+XZJAfdLyE4:EgTpcWKlEqyB4FU+twaTXDKVNZJAF
TLSH
T1F215C01AAB4448F9D489C874C3479A635AB674CB1B36A5FF02D212243F7EAF51F2C319
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_11a81cca991d5996d8a84f588416bfdf_akira_glassworm_rusty-stealer

File Explorer

2026-08-09_11a81cca991d5996d8a84f588416bfdf_akira_glassworm_rusty-stealer

.exe 870KB

2026-08-09_11a81cca991d5996d8a84f588416bfdf_akira_glassworm_rusty-stealer

IMPHASH 4a7c38e854fa377263e66825802b4087
SHA256 28277f04f882928bc2eddaf29f9ecd0605a939e9952b53e5c629a5d9f2b1b43e
MD5 11a81cca991d5996d8a84f588416bfdf
SHA1 56a8952483374ef006cb6cd4a1672bba5466fe06
SHA512 e9d7e748959b4c9aa0761fe3175d5b419960c6ce6ebb318a89ace98baffe2321a2865083225ad3f57bb2a40e8e10ced06650777a792d33dccc185b68f774c96d
SSDEEP 12288:wjDPb4JB7FrnmGcbqKlZWnZQnyB4FmE4CXQ+twdYFTvjrDHc5VE+XZJAfdLyE4:EgTpcWKlEqyB4FU+twaTXDKVNZJAF
TLSH
T1F215C01AAB4448F9D489C874C3479A635AB674CB1B36A5FF02D212243F7EAF51F2C319
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

312912

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

PNIVXV.pdb

msvcrt

_amsg_exit _CxxThrowException _initterm_e __C_specific_handler memmove memset _set_fmode __CxxFrameHandler3 memcpy memcmp strlen wcslen _errno ?terminate@@YAXXZ free _msize realloc _XcptFilter ?_set_new_mode@@YAHH@Z _environ __getmainargs _commode _initterm __argc __argv __set_app_type

psapi

GetProcessMemoryInfo GetModuleFileNameExW

kernel32

InitializeSListHead CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject Sleep QueryPerformanceFrequency GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetCurrentThreadId SetLastError GetEnvironmentVariableW GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx GetProcAddress lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetModuleHandleW FormatMessageW QueryPerformanceCounter GetModuleHandleA CreateFileW GetFileAttributesW AreFileApisANSI RaiseException ReleaseSRWLockShared AcquireSRWLockShared CreateEventW WaitForMultipleObjects SwitchToThread CreateThread GetProcessId OpenProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime GetTickCount64 GetSystemDirectoryW VirtualAlloc VirtualProtect VirtualQuery FreeLibrary GetModuleFileNameW LocalFree CompareStringOrdinal ExitProcess TerminateProcess GetModuleHandleExW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetExitCodeProcess GetThreadContext GetSystemInfo WriteFileEx SleepEx ReadFileEx GetCommandLineW SetFileInformationByHandle GetFullPathNameW GetEnvironmentStringsW FreeEnvironmentStringsW GetWindowsDirectoryW InitializeProcThreadAttributeList UpdateProcThreadAttribute CreateProcessW DeleteProcThreadAttributeList CreateNamedPipeW CancelIo GetOverlappedResult ReadFile GetSystemTimes GetProcessIoCounters GetProcessTimes ReadProcessMemory VirtualQueryEx GlobalMemoryStatusEx K32GetPerformanceInfo

oleaut32

SysFreeString GetErrorInfo SysStringLen

pdh

PdhCollectQueryData PdhRemoveCounter PdhCloseQuery PdhAddEnglishCounterW PdhGetFormattedCounterValue PdhOpenQueryA

advapi32

GetTokenInformation RegQueryValueExW CopySid GetLengthSid IsValidSid OpenProcessToken RegOpenKeyExW

powrprof

CallNtPowerInformation

shell32

CommandLineToArgvW

ntdll

NtQuerySystemInformation RtlGetVersion NtQueryInformationProcess NtReadFile NtWriteFile RtlNtStatusToDosError

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_11a81cca991d5996d8a84f588416bfdf_akira_glassworm_rusty-stealer

msvcrt

psapi

kernel32

oleaut32

pdh

advapi32

powrprof

shell32

ntdll

generic