2026-08-19_bd5ff2aa1568ab360bd00973d670bd81_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-19_bd5ff2aa1568ab360bd00973d670bd81_akira_glassworm_rusty-stealer
Size 229KB
Sample260819-e553nadn51
SHA256 0447c15031e9c20bf3e54fff070fc9f3315a189c97d223459ffedf6bda21923c
MD5 bd5ff2aa1568ab360bd00973d670bd81
SHA1 0ecf3633dfaf5605edba03e2c0aa82b59541095d
SHA512 30e388b9c06d28858e85d9e6e00d12f4a54eef3e816b1be51baaac06aa84a10563bc115a1d546abaf5d29c54754839e7345c40e26664906f7c2ad9f8bd6e24e4
SSDEEP 6144:a/omXJR2H4kQus6tXC6mFEokG7VrlZtczpIQP54rSM3I5K:a/lT2YkDFNRmHprTcFInrSdK
TLSH
T1CD345B223A995DACE556C078C3468663693678CA0B32F9FF02D441352F6ABF67F3C614
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_bd5ff2aa1568ab360bd00973d670bd81_akira_glassworm_rusty-stealer

File Explorer

2026-08-19_bd5ff2aa1568ab360bd00973d670bd81_akira_glassworm_rusty-stealer

.exe 229KB

2026-08-19_bd5ff2aa1568ab360bd00973d670bd81_akira_glassworm_rusty-stealer

IMPHASH bf1219096ed5d624709d10c674ef7bec
SHA256 0447c15031e9c20bf3e54fff070fc9f3315a189c97d223459ffedf6bda21923c
MD5 bd5ff2aa1568ab360bd00973d670bd81
SHA1 0ecf3633dfaf5605edba03e2c0aa82b59541095d
SHA512 30e388b9c06d28858e85d9e6e00d12f4a54eef3e816b1be51baaac06aa84a10563bc115a1d546abaf5d29c54754839e7345c40e26664906f7c2ad9f8bd6e24e4
SSDEEP 6144:a/omXJR2H4kQus6tXC6mFEokG7VrlZtczpIQP54rSM3I5K:a/lT2YkDFNRmHprTcFInrSdK
TLSH
T1CD345B223A995DACE556C078C3468663693678CA0B32F9FF02D441352F6ABF67F3C614
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

168688

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

svchost_updater.pdb

kernel32

FreeLibrary GetProcAddress LoadLibraryA CreateProcessW IsDebuggerPresent InitializeSListHead WaitForSingleObject GetModuleHandleA CloseHandle VirtualProtect AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree GetCurrentProcessId GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetExitCodeProcess WaitForMultipleObjects CreateThread DuplicateHandle CreateEventW Sleep SetWaitableTimer CreateWaitableTimerExW SleepEx GetModuleFileNameW FormatMessageW GetModuleHandleW HeapAlloc WriteConsoleW IsProcessorFeaturePresent GetConsoleOutputCP GetConsoleMode GetStdHandle RtlVirtualUnwind ReleaseMutex CreateMutexA WaitForSingleObjectEx RtlLookupFunctionEntry RtlCaptureContext SetLastError GetCurrentThreadId GetLastError HeapReAlloc GetConsoleWindow CreateFileW GetFileAttributesW GetWindowsDirectoryW GetSystemDirectoryW CompareStringOrdinal FreeEnvironmentStringsW GetEnvironmentStringsW ReadFile GetOverlappedResult QueryPerformanceCounter ReadFileEx WriteFileEx GetFullPathNameW GetSystemTimeAsFileTime MultiByteToWideChar WideCharToMultiByte lstrlenW GetCurrentDirectoryW GetSystemTimePreciseAsFileTime CancelIo GetEnvironmentVariableW

user32

ShowWindow

advapi32

RegCloseKey RegSetValueExW RegCreateKeyExW GetTokenInformation RegDeleteTreeW OpenProcessToken SystemFunction036

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

ntdll

NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile NtReadFile NtOpenFile

bcrypt

BCryptGenRandom

vcruntime140

__current_exception __current_exception_context memcmp __C_specific_handler memcpy __CxxFrameHandler3 memset memmove

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initialize_narrow_environment _set_app_type _seh_filter_exe _cexit exit _initterm _exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _register_onexit_function _crt_atexit terminate _c_exit __p___argv _initterm_e __p___argc _get_initial_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_bd5ff2aa1568ab360bd00973d670bd81_akira_glassworm_rusty-stealer

kernel32

user32

advapi32

api-ms-win-core-synch-l1-2-0

ntdll

bcrypt

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic