2026-08-22_a49da1128fffb73ef30c8b0372470aba_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-22_a49da1128fffb73ef30c8b0372470aba_akira_glassworm_rusty-stealer
Size 5.7MB
Sample260823-dv8kcssdkb
SHA256 5ad70ddc5c2a2bfe84084a2c4c73558e9360914f035a902d7a69277be7249f1f
MD5 a49da1128fffb73ef30c8b0372470aba
SHA1 a62bb961a628679325bf251e00bf82874b9d571d
SHA512 a460179d9157155e55d18a7873154a53cfa9d3fe2762d8f4a8603cbf3231062ecb697fa1e692f2ff81d942b4688e1d7e6ed33ce5f0afe8babf5e68bded3bcec8
SSDEEP 49152:vljNl6sLkOYefV7E29o1Z4ByHMNvi+5QC3xv4QDzJyCu4/2WojhLZhRWypp6w3hL:9Df/qYy6m3BsyUqIwhOO+G1iii
TLSH
T1395619107ADB99BFD269C5F8C38646721A2334CE0B25BAFF44C445393E69EB41F38616
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_a49da1128fffb73ef30c8b0372470aba_akira_glassworm_rusty-stealer

File Explorer

2026-08-22_a49da1128fffb73ef30c8b0372470aba_akira_glassworm_rusty-stealer

.exe 5.7MB

2026-08-22_a49da1128fffb73ef30c8b0372470aba_akira_glassworm_rusty-stealer

IMPHASH 0c5fd031eed21607c1b657bb63297dde
SHA256 5ad70ddc5c2a2bfe84084a2c4c73558e9360914f035a902d7a69277be7249f1f
MD5 a49da1128fffb73ef30c8b0372470aba
SHA1 a62bb961a628679325bf251e00bf82874b9d571d
SHA512 a460179d9157155e55d18a7873154a53cfa9d3fe2762d8f4a8603cbf3231062ecb697fa1e692f2ff81d942b4688e1d7e6ed33ce5f0afe8babf5e68bded3bcec8
SSDEEP 49152:vljNl6sLkOYefV7E29o1Z4ByHMNvi+5QC3xv4QDzJyCu4/2WojhLZhRWypp6w3hL:9Df/qYy6m3BsyUqIwhOO+G1iii
TLSH
T1395619107ADB99BFD269C5F8C38646721A2334CE0B25BAFF44C445393E69EB41F38616
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3908144

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

alacritty.pdb

bcryptprimitives

ProcessPrng

kernel32

GetModuleFileNameW GetExitCodeProcess SetThreadErrorMode GetProcessId CloseHandle Sleep GetModuleHandleA SwitchToThread RegisterWaitForSingleObject ReadFile UnregisterWait GlobalFree LoadLibraryExW PostQueuedCompletionStatus GetCurrentThread ReadDirectoryChangesW ReleaseSemaphore WaitForSingleObjectEx CancelIo CreateFileW CreateSemaphoreW CreateIoCompletionPort GetCurrentProcessId GetQueuedCompletionStatusEx GetCurrentProcess LoadLibraryA CreateMutexA CreateThread ReleaseMutex WaitForSingleObject SetThreadStackGuarantee SetLastError GetFinalPathNameByHandleW SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx DeleteFileW FindFirstFileExW GetCurrentThreadId FindClose GetFileType GetFullPathNameW GetTempPathW ExitProcess LoadLibraryW InitializeProcThreadAttributeList GetFileAttributesW DuplicateHandle ReadFileEx SleepEx WriteFileEx UpdateProcThreadAttribute SetFileAttributesW MoveFileExW CreateWaitableTimerExW SetWaitableTimer IsProcessorFeaturePresent FreeLibrary CreateProcessW GetProcAddress GetLastError GetModuleHandleW WriteFile GetWindowsDirectoryW GetSystemDirectoryW CompareStringOrdinal GetConsoleOutputCP WriteConsoleW HeapAlloc QueryPerformanceFrequency SetEnvironmentVariableW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW AddVectoredExceptionHandler FormatMessageW GetUserDefaultLocaleName GlobalUnlock GlobalAlloc MultiByteToWideChar WideCharToMultiByte RtlLookupFunctionEntry GlobalLock SetConsoleTextAttribute GetConsoleScreenBufferInfo SetConsoleMode GetConsoleMode GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW CreatePipe ClosePseudoConsole ResizePseudoConsole CreatePseudoConsole FreeConsole AttachConsole lstrlenW QueryPerformanceCounter HeapReAlloc HeapFree GetProcessHeap RtlCaptureContext RtlVirtualUnwind GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter GlobalSize SetUnhandledExceptionFilter

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

advapi32

RevertToSelf ImpersonateAnonymousToken

ntdll

NtOpenFile NtWriteFile NtReadFile RtlNtStatusToDosError NtCreateNamedPipeFile

opengl32

wglShareLists wglDeleteContext wglGetCurrentContext wglGetProcAddress wglCreateContext wglGetCurrentDC wglMakeCurrent

gdi32

SwapBuffers DescribePixelFormat SetPixelFormat CreateRectRgn DeleteObject GetDeviceCaps ChoosePixelFormat

ole32

CoInitializeEx CoTaskMemFree RevokeDragDrop CoCreateInstance CoUninitialize RegisterDragDrop OleInitialize

user32

TranslateMessage GetClassNameW DestroyWindow SetCursor LoadCursorW FlashWindowEx GetWindowLongPtrW RegisterRawInputDevices RedrawWindow MessageBoxW EnumDisplaySettingsExW DispatchMessageW ChangeDisplaySettingsExW GetWindowPlacement SetWindowPlacement GetSystemMetrics SetWindowLongPtrW GetClipboardData SetClipboardData GetClassInfoExW DefWindowProcW RegisterClassExW CreateWindowExW GetMenu ScreenToClient MonitorFromRect ReleaseCapture CloseClipboard TrackMouseEvent GetTouchInputInfo CloseTouchInputHandle GetCursorPos GetRawInputData ValidateRect MapVirtualKeyExW GetKeyboardState GetAsyncKeyState GetKeyState MapVirtualKeyW SendInput SetForegroundWindow RegisterTouchWindow SendMessageW SetWindowDisplayAffinity RegisterWindowMessageA MsgWaitForMultipleObjectsEx ToUnicodeEx GetKeyboardLayout ClientToScreen GetClipCursor ClipCursor ShowCursor ShowWindow GetSystemMenu EnableMenuItem SetWindowLongW GetWindowLongW AdjustWindowRectEx IsProcessDPIAware GetWindowRect DestroyCursor DestroyIcon SystemParametersInfoA LoadImageW EmptyClipboard OpenClipboard SetCapture GetDC PeekMessageW GetMonitorInfoW InvalidateRgn SetWindowPos IsIconic GetActiveWindow GetClientRect MonitorFromWindow ReleaseDC PostMessageW SetWindowTextW

shell32

SHGetKnownFolderPath DragQueryFileW DragFinish

imm32

ImmSetCandidateWindow ImmGetCompositionStringW ImmReleaseContext ImmGetContext ImmAssociateContextEx ImmSetCompositionWindow

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

uxtheme

SetWindowTheme

vcruntime140

memset __current_exception_context __current_exception memcpy __CxxFrameHandler3 memcmp memmove _CxxThrowException __C_specific_handler

api-ms-win-crt-string-l1-1-0

wcslen strlen

api-ms-win-crt-math-l1-1-0

__setusermatherr roundf trunc pow _hypotf truncf round fmaf floor fmod floorf _hypot fmodf

api-ms-win-crt-runtime-l1-1-0

exit strerror _exit __p___argc __p___argv _cexit _c_exit _seh_filter_exe _set_app_type _configure_narrow_argv _register_thread_local_exe_atexit_callback _initterm_e _initialize_narrow_environment _crt_atexit _initialize_onexit_table terminate _get_initial_narrow_environment _register_onexit_function _initterm

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-22_a49da1128fffb73ef30c8b0372470aba_akira_glassworm_rusty-stealer

bcryptprimitives

kernel32

api-ms-win-core-synch-l1-2-0

advapi32

ntdll

opengl32

gdi32

ole32

user32

shell32

imm32

dwmapi

uxtheme

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic