2026-08-11_0f6d5c814e677fc4fda8fafa82ddb6b3_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-11_0f6d5c814e677fc4fda8fafa82ddb6b3_akira_glassworm_rusty-stealer
Size 1.4MB
Sample260812-bepffasyas
SHA256 a405ae29b0ae8e418726a4370e876117fbcbf66137c98b7a35b7a9290dac7c01
MD5 0f6d5c814e677fc4fda8fafa82ddb6b3
SHA1 75479158e6348c0fc91383ea1495aee08a08bc49
SHA512 9e93cf83e67ea1768f49a1b5c140a81aa7946f27ba0fdfe25c6a473f690cf21d73ff46d5fddccf475f682869439fed9c3bac689cdf1621f1e7c66b4c73c28013
SSDEEP 24576:g6zLFIKWgMchewuB30VPABfxDx4r7lEGmPdOmKxFM3VIH06iyKd:g6zxIKhh8Z0VYB9xklEG0GYIU6iFd
TLSH
T1D2658D03F651C1E9C4ADC478C7578532AA32BC8E0B3475EF27C4AA152E7AF906B2DB15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-11_0f6d5c814e677fc4fda8fafa82ddb6b3_akira_glassworm_rusty-stealer

File Explorer

2026-08-11_0f6d5c814e677fc4fda8fafa82ddb6b3_akira_glassworm_rusty-stealer

.exe 1.4MB

2026-08-11_0f6d5c814e677fc4fda8fafa82ddb6b3_akira_glassworm_rusty-stealer

IMPHASH ea4398f0b5d282741b4ab7bfb1cb2f81
SHA256 a405ae29b0ae8e418726a4370e876117fbcbf66137c98b7a35b7a9290dac7c01
MD5 0f6d5c814e677fc4fda8fafa82ddb6b3
SHA1 75479158e6348c0fc91383ea1495aee08a08bc49
SHA512 9e93cf83e67ea1768f49a1b5c140a81aa7946f27ba0fdfe25c6a473f690cf21d73ff46d5fddccf475f682869439fed9c3bac689cdf1621f1e7c66b4c73c28013
SSDEEP 24576:g6zLFIKWgMchewuB30VPABfxDx4r7lEGmPdOmKxFM3VIH06iyKd:g6zxIKhh8Z0VYB9xklEG0GYIU6iFd
TLSH
T1D2658D03F651C1E9C4ADC478C7578532AA32BC8E0B3475EF27C4AA152E7AF906B2DB15
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

867184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

implant.pdb

kernel32

GetLastError DeleteFileW SetFileInformationByHandle CreateMutexW GetCurrentProcessId MoveFileExW WaitForSingleObject GetExitCodeProcess GetProcessId TerminateProcess AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetSystemTimePreciseAsFileTime GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW SetLastError SleepEx WriteFileEx QueryPerformanceFrequency GetModuleHandleW FormatMessageW QueryPerformanceCounter SetHandleInformation GetModuleHandleA GetFullPathNameW CreateFileW SetFileTime ExitProcess WaitForMultipleObjects GetOverlappedResult CreateEventW CancelIo ReadFile CompareStringOrdinal GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetModuleFileNameW DuplicateHandle CreateThread GetTempPathW CopyFileExW CreateWaitableTimerExW SetWaitableTimer Sleep SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime ReadFileEx IsProcessorFeaturePresent CloseHandle

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

ntdll

NtOpenFile RtlNtStatusToDosError NtWriteFile NtReadFile NtCreateNamedPipeFile

ws2_32

WSACleanup WSASocketW closesocket ioctlsocket setsockopt WSASend send getaddrinfo getpeername WSARecv recv freeaddrinfo connect select getsockopt WSADuplicateSocketW getsockname WSAGetLastError WSAStartup

vcruntime140

__current_exception_context __current_exception __C_specific_handler memset memmove __CxxFrameHandler3 memcpy memcmp

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _configure_narrow_argv _initterm_e exit _exit _set_app_type _initialize_narrow_environment __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm _seh_filter_exe terminate _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-11_0f6d5c814e677fc4fda8fafa82ddb6b3_akira_glassworm_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

bcrypt

advapi32

ntdll

ws2_32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic