2026-08-20_674da417780931fcbef3757953447015_akira_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_674da417780931fcbef3757953447015_akira_elex_glassworm
Size 17.3MB
Sample260820-ps33msdd55
SHA256 9f18ccb6dfc0c27dc90e155218934bdb13314bf1cb8c5bd3af21760de1a93997
MD5 674da417780931fcbef3757953447015
SHA1 c7dbf8e9a79b324f91269479a5d43a4cab060358
SHA512 aa3a0e2b130879af610236e394b8ad2caf007bd0d2e1a9ea20b7e3ee07c839a8ba9a4344eca24a1adaa8886a36fcdb71a6a4b81ac3882cb07ca83908fd958913
SSDEEP 24576:L+T/tulYvPlfLql+0uLXc9mRz1fWAeRSoD/1UqD0IOZUp741ZDY4yBJzzxTVH6Gt:iGYvBY
TLSH
T13B07EB2EB51C43771ADB07A1872EA4C6B23B725EB79F09CCA05CD261235B46487FBC94
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-20_674da417780931fcbef3757953447015_akira_elex_glassworm

File Explorer

2026-08-20_674da417780931fcbef3757953447015_akira_elex_glassworm

.exe 17.3MB

2026-08-20_674da417780931fcbef3757953447015_akira_elex_glassworm

IMPHASH d53553005bf49cdd899b30074ad232c7
SHA256 9f18ccb6dfc0c27dc90e155218934bdb13314bf1cb8c5bd3af21760de1a93997
MD5 674da417780931fcbef3757953447015
SHA1 c7dbf8e9a79b324f91269479a5d43a4cab060358
SHA512 aa3a0e2b130879af610236e394b8ad2caf007bd0d2e1a9ea20b7e3ee07c839a8ba9a4344eca24a1adaa8886a36fcdb71a6a4b81ac3882cb07ca83908fd958913
SSDEEP 24576:L+T/tulYvPlfLql+0uLXc9mRz1fWAeRSoD/1UqD0IOZUp741ZDY4yBJzzxTVH6Gt:iGYvBY
TLSH
T13B07EB2EB51C43771ADB07A1872EA4C6B23B725EB79F09CCA05CD261235B46487FBC94
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

8c:e6:1a:f2:91:c0:fe:c7:d9:47:2e:11:af:79:25:e2:06:a1:ad:0e:ec:b5:e6:83:0b:dc:15:e1:6c:67:d1:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 14, 2026

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

Major OS version

Entry point

4282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CreateEventA CreateSemaphoreA DeleteCriticalSection EnterCriticalSection GetHandleInformation GetProcessAffinityMask GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount InitializeCriticalSection LeaveCriticalSection OpenProcess OutputDebugStringA RaiseException ReleaseSemaphore RemoveVectoredExceptionHandler ResetEvent ResumeThread SetEvent SetProcessAffinityMask SetThreadContext SetThreadPriority SuspendThread TryEnterCriticalSection VirtualQuery WaitForMultipleObjects AddVectoredExceptionHandler CloseHandle CompareStringOrdinal CreateFileA CreateFileMappingA CreateFileW CreateMutexA CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DuplicateHandle FormatMessageW FreeEnvironmentStringsW FreeLibrary GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStdHandle GetSystemDirectoryW GetSystemTimePreciseAsFileTime GetTempPathW GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete IsDebuggerPresent LoadLibraryA MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency ReadFileEx ReleaseMutex RtlCaptureContext SetFileInformationByHandle SetFileTime SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualProtect WaitForSingleObject WaitForSingleObjectEx WriteConsoleW WriteFileEx lstrlenW

api-ms-win-crt-convert-l1-1-0

_ultoa

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc realloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

_setjmp3 longjmp memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p___wargv _beginthreadex _cexit _configure_narrow_argv _configure_wide_argv _crt_at_quick_exit _crt_atexit _endthreadex _errno _exit _fpreset _initialize_narrow_environment _set_app_type _initialize_wide_environment _initterm _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf __stdio_common_vsprintf __stdio_common_vswprintf fgetwc fwrite getc

api-ms-win-crt-string-l1-1-0

_strdup memset strlen strncmp

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _tzset

ntdll

NtCreateNamedPipeFile NtOpenFile NtWriteFile RtlNtStatusToDosError

gdi32

GetStockObject

user32

GetDC GetDesktopWindow ReleaseDC

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

Name

.text

Size

337KB

Virtual Size

336KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6.9MB

Virtual Size

6.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

476B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_674da417780931fcbef3757953447015_akira_elex_glassworm

PE Signature issue

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

ntdll

gdi32

user32

api-ms-win-core-synch-l1-2-0

generic