2026-08-15_6c492bb1936ff84381286c7ebb59925e_akira_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_6c492bb1936ff84381286c7ebb59925e_akira_elex_glassworm
Size 608KB
Sample260815-lbkm7atamd
SHA256 2ccf96ddac1c39ea5e1542d76a136d87529ba9e81127a8ee9a3415ed1ed0acef
MD5 6c492bb1936ff84381286c7ebb59925e
SHA1 94fb9dbefe30d4be60bcbbcfd43b64415fd072db
SHA512 02fe06ef9ad7977fc98bf264070f47a2247cdb7d932c1138d7a1ae6664e090de37b1f26567808586d20d7d1e4613ebbef9cbb2d86b60ad652d7b3b44770ec470
SSDEEP 12288:ylRp9oGQ2hne8GmtBYEOU0Ahiei9uooHOy8A7hydBj+Fw:ylRpeGvheJmHYHU0sXi9+HOy8A7cYw
TLSH
T189D44A0AEED234AACD4211B3295EA37F9B72880597529EFF83948850BD113F25C3757B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-15_6c492bb1936ff84381286c7ebb59925e_akira_elex_glassworm

.exe 608KB

2026-08-15_6c492bb1936ff84381286c7ebb59925e_akira_elex_glassworm

IMPHASH 75cc4a4449f4095d63ee42cdc0daa7eb
SHA256 2ccf96ddac1c39ea5e1542d76a136d87529ba9e81127a8ee9a3415ed1ed0acef
MD5 6c492bb1936ff84381286c7ebb59925e
SHA1 94fb9dbefe30d4be60bcbbcfd43b64415fd072db
SHA512 02fe06ef9ad7977fc98bf264070f47a2247cdb7d932c1138d7a1ae6664e090de37b1f26567808586d20d7d1e4613ebbef9cbb2d86b60ad652d7b3b44770ec470
SSDEEP 12288:ylRp9oGQ2hne8GmtBYEOU0Ahiei9uooHOy8A7hydBj+Fw:ylRpeGvheJmHYHU0sXi9+HOy8A7cYw
TLSH
T189D44A0AEED234AACD4211B3295EA37F9B72880597529EFF83948850BD113F25C3757B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

ef:12:fd:a3:93:00:3f:01:97:d9:81:73:24:06:9e:2c:a5:3b:60:39:2c:26:83:b3:ff:68:f2:cf:08:eb:c3:65

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 12, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1c:fa:cd:c5:9b:e8:2f:7e:c4:00:00:00:00:02:1c

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:401A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:19:5e:b2:d8:54:75:f4:b1:8d:00:01:00:00:02:19

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

Major OS version

Entry point

434320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

inno_updater.pdb

kernel32

HeapReAlloc CreateWaitableTimerExW Sleep SetWaitableTimer WaitForSingleObject SwitchToThread OpenProcess K32GetModuleFileNameExW TerminateProcess GetModuleHandleW GetSystemTimeAsFileTime GetExitCodeProcess CreateFileW GetFileInformationByHandleEx GetCurrentThread Process32FirstW GetSystemTimePreciseAsFileTime GetFileType CreateToolhelp32Snapshot GetCurrentThreadId InitializeSListHead SetThreadStackGuarantee FormatMessageW GetCurrentDirectoryW GetCurrentProcess RtlCaptureContext GetProcAddress ReleaseMutex WaitForSingleObjectEx LoadLibraryA lstrlenW GetModuleFileNameW CreateMutexA WideCharToMultiByte MultiByteToWideChar GetEnvironmentVariableW GetModuleHandleA CreateThread ExitProcess QueryPerformanceCounter QueryPerformanceFrequency HeapAlloc HeapFree GetProcessHeap IsDebuggerPresent SetFileInformationByHandle AddVectoredExceptionHandler GetCommandLineW GetStdHandle GetConsoleScreenBufferInfo SetConsoleMode GetConsoleMode CreateFileA SetLastError GetLastError SetFilePointerEx CloseHandle FindClose GetConsoleOutputCP SetUnhandledExceptionFilter WriteConsoleW UnhandledExceptionFilter FillConsoleOutputAttribute FillConsoleOutputCharacterW SetConsoleCursorPosition SetConsoleTextAttribute MoveFileExW FindFirstFileExW GetCurrentProcessId FindNextFileW GetFullPathNameW GetFileInformationByHandle Process32NextW GetTempPathW GetTimeZoneInformationForYear IsProcessorFeaturePresent

ntdll

NtWriteFile RtlNtStatusToDosError NtReadFile NtOpenFile

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

bcryptprimitives

ProcessPrng

user32

SetWindowPos GetDesktopWindow GetWindowRect ShutdownBlockReasonCreate MessageBoxW ShutdownBlockReasonDestroy SetDlgItemTextW EndDialog DialogBoxParamW PostThreadMessageW SendMessageW SendDlgItemMessageW

userenv

GetUserProfileDirectoryW

vcruntime140

memset memcpy memmove _except_handler4_common __current_exception_context __current_exception __CxxFrameHandler3 memcmp

api-ms-win-crt-runtime-l1-1-0

__p___argv __p___argc _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _cexit _set_app_type _seh_filter_exe _initialize_onexit_table _register_onexit_function _crt_atexit _controlfp_s terminate _register_thread_local_exe_atexit_callback _c_exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_6c492bb1936ff84381286c7ebb59925e_akira_elex_glassworm

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

bcryptprimitives

user32

userenv

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic