2026-08-10_ab150d5b91f6805564085f351128d3ff_akira_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_ab150d5b91f6805564085f351128d3ff_akira_elex_glassworm
Size 18.4MB
Sample260810-gpg21asdlb
SHA256 5fc42055abcf7b45afd327d61a2f20adeda73745fc49300b0864cdb002117d76
MD5 ab150d5b91f6805564085f351128d3ff
SHA1 e05e4e6d1a62a173de9ee0d0c5c19694fcfd6497
SHA512 3b251eb58e5b89e6745b4bb31ef104042f6c08d5bb99016f36d4d0533c0aa8d169f313b23e4ac4f7dcb791330f087d84bf5e484b76e101fa9da7ba7c028cb9e4
SSDEEP 98304:dN8ltQgvfPz73JJTaxzPMNbq6n/bye+nQq7mQ01p1UfoUPx3:duTvf7754L2btbv+nQPz1PUPx
TLSH
T11817C0BC76047DE6666F577BDA96ACDC03B626239ACBA4CC8064B7C30563375FE02805
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_ab150d5b91f6805564085f351128d3ff_akira_elex_glassworm

File Explorer

2026-08-10_ab150d5b91f6805564085f351128d3ff_akira_elex_glassworm

.exe 18.4MB

2026-08-10_ab150d5b91f6805564085f351128d3ff_akira_elex_glassworm

IMPHASH f3fa365e6ed14ea3bd64ed1d1af3b7a6
SHA256 5fc42055abcf7b45afd327d61a2f20adeda73745fc49300b0864cdb002117d76
MD5 ab150d5b91f6805564085f351128d3ff
SHA1 e05e4e6d1a62a173de9ee0d0c5c19694fcfd6497
SHA512 3b251eb58e5b89e6745b4bb31ef104042f6c08d5bb99016f36d4d0533c0aa8d169f313b23e4ac4f7dcb791330f087d84bf5e484b76e101fa9da7ba7c028cb9e4
SSDEEP 98304:dN8ltQgvfPz73JJTaxzPMNbq6n/bye+nQq7mQ01p1UfoUPx3:duTvf7754L2btbv+nQPz1PUPx
TLSH
T11817C0BC76047DE6666F577BDA96ACDC03B626239ACBA4CC8064B7C30563375FE02805
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection VirtualProtect VirtualQuery AddVectoredExceptionHandler CloseHandle CompareStringOrdinal CreateFileMappingA CreateFileW CreateMutexA CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DuplicateHandle FormatMessageW FreeEnvironmentStringsW FreeLibrary GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStdHandle GetSystemDirectoryW GetSystemTimePreciseAsFileTime GetTempPathW GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete LoadLibraryA MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency ReadFileEx ReleaseMutex RtlCaptureContext SetFileAttributesA SetFileInformationByHandle SetFileTime SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile WaitForSingleObject WaitForSingleObjectEx WriteConsoleW WriteFileEx lstrlenW

msvcrt

__getmainargs __p__fmode __p__iob __p___initenv __p__commode __set_app_type __setusermatherr _amsg_exit _cexit _commode _exit _fpreset _fmode _initterm abort atexit calloc exit fflush fprintf free malloc memcmp memcpy memmove memset setvbuf signal strlen strncmp vfprintf

ntdll

NtCreateNamedPipeFile NtOpenFile NtWriteFile RtlNtStatusToDosError

advapi32

GetTokenInformation OpenProcessToken

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

Name

.text

Size

305KB

Virtual Size

305KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

18.0MB

Virtual Size

18.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

404B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_ab150d5b91f6805564085f351128d3ff_akira_elex_glassworm

kernel32

msvcrt

ntdll

advapi32

api-ms-win-core-synch-l1-2-0

generic