2026-08-25_9a85549f7c6dd3eb5ad442a5b8c936db_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-25_9a85549f7c6dd3eb5ad442a5b8c936db_akira_glassworm_rusty-stealer
Size 75.0MB
Sample260826-tkdj8seb77
SHA256 ef4df839553d3e8d342e60291bd6102e96f5ba8170f6fc80f646f8db0a408b18
MD5 9a85549f7c6dd3eb5ad442a5b8c936db
SHA1 fca9188e3d3299b50de41b0d33200cff1d8f1fd5
SHA512 b047c0983bca9030556331518a7bb1f359c6155830fb3deaa433a7abd6e70e809cfe24337b78840b817c7dc76dec5244310016582440a3794cde3157672b3215
SSDEEP 1572864:wy3reOYl4cq99JniMYWsCjbqWWwLeulUK6cKAwI3c1S9v:Fjg4cWRiBsqdWewUK2QMS
TLSH
T13D083343FB9586E9C09EC138825A9336EB72B88D1B21B39F27D44A612F53B702F5D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-25_9a85549f7c6dd3eb5ad442a5b8c936db_akira_glassworm_rusty-stealer

File Explorer

2026-08-25_9a85549f7c6dd3eb5ad442a5b8c936db_akira_glassworm_rusty-stealer

.exe 75.0MB

2026-08-25_9a85549f7c6dd3eb5ad442a5b8c936db_akira_glassworm_rusty-stealer

IMPHASH 2b04e06a7b04f1ea9ef7f2c402360bdf
SHA256 ef4df839553d3e8d342e60291bd6102e96f5ba8170f6fc80f646f8db0a408b18
MD5 9a85549f7c6dd3eb5ad442a5b8c936db
SHA1 fca9188e3d3299b50de41b0d33200cff1d8f1fd5
SHA512 b047c0983bca9030556331518a7bb1f359c6155830fb3deaa433a7abd6e70e809cfe24337b78840b817c7dc76dec5244310016582440a3794cde3157672b3215
SSDEEP 1572864:wy3reOYl4cq99JniMYWsCjbqWWwLeulUK6cKAwI3c1S9v:Fjg4cWRiBsqdWewUK2QMS
TLSH
T13D083343FB9586E9C09EC138825A9336EB72B88D1B21B39F27D44A612F53B702F5D354
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

da:18:37:4a:9f:68:fe:7e:28:55:3f:1e:66:99:d7:18:23:90:94:4b:07:79:f1:c1:33:11:ca:d5:b6:3e:ce:e8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility

Chains

Aug 26, 2026

CN=Microsoft Windows Software Compatibility

Minor OS version

Major OS version

Entry point

2625192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

spongebob_launcher.pdb

kernel32

DeleteFileW GetExitCodeProcess SetHandleInformation SetFilePointerEx CreateThread WriteFileEx SleepEx ReadFileEx GetSystemTimePreciseAsFileTime CreateWaitableTimerExW SetWaitableTimer Sleep CreateEventW CancelIo ReadFile GetModuleFileNameW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle WaitForSingleObject GetOverlappedResult WaitForMultipleObjects PostQueuedCompletionStatus CopyFileExW FindClose FindNextFileW SetFileInformationByHandle LoadLibraryExA FreeLibrary LoadLibraryA GetModuleHandleA GetProcAddress GetModuleHandleW GetTempPathW GetFileInformationByHandleEx GetFileInformationByHandle SetFileTime CreateFileW IsDebuggerPresent AddVectoredExceptionHandler FindFirstFileExW GetFullPathNameW CreateDirectoryW RtlCaptureContext RtlLookupFunctionEntry GetCurrentThreadId GetCurrentDirectoryW lstrlenW WideCharToMultiByte GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW GetEnvironmentVariableW FormatMessageW QueryPerformanceFrequency QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal HeapAlloc WaitForSingleObjectEx FlushFileBuffers GetTickCount MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime GetFileSize LockFileEx LocalFree UnlockFile HeapDestroy HeapCompact LoadLibraryW DeleteFileA CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapSize HeapValidate UnmapViewOfFile CreateMutexW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile HeapCreate AreFileApisANSI RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection ReleaseMutex CreateMutexA RtlVirtualUnwind GetCurrentProcessId SetFileCompletionNotificationModes CreateIoCompletionPort GetQueuedCompletionStatusEx GetFinalPathNameByHandleW SetLastError TerminateProcess IsProcessorFeaturePresent GetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter SwitchToThread HeapReAlloc HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee GetTickCount64 GetSystemInfo GlobalMemoryStatusEx CloseHandle GetCurrentProcess InitializeSListHead

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

ws2_32

getsockopt shutdown WSASocketW closesocket ioctlsocket connect bind WSAStartup WSACleanup getaddrinfo freeaddrinfo WSAIoctl recv send setsockopt WSASend getsockname WSAGetLastError getpeername

ntdll

NtDeviceIoControlFile NtCreateFile NtCancelIoFileEx NtWriteFile NtReadFile NtOpenFile NtCreateNamedPipeFile RtlNtStatusToDosError

crypt32

CertGetCertificateChain CertFreeCertificateChain CertDuplicateStore CertFreeCertificateContext CertOpenStore CertCloseStore CertEnumCertificatesInStore CertDuplicateCertificateChain CertVerifyCertificateChainPolicy CertAddCertificateContextToStore CryptUnprotectData CertDuplicateCertificateContext

secur32

EncryptMessage DeleteSecurityContext DecryptMessage FreeContextBuffer AcceptSecurityContext AcquireCredentialsHandleA FreeCredentialsHandle InitializeSecurityContextW QueryContextAttributesW ApplyControlToken

bcryptprimitives

ProcessPrng

oleaut32

SysStringLen GetErrorInfo SysFreeString

user32

GetSystemMetrics

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW

shell32

SHGetKnownFolderPath

vcruntime140

strrchr __C_specific_handler __current_exception memcpy __current_exception_context memcmp __CxxFrameHandler3 memmove memset

api-ms-win-crt-string-l1-1-0

strcspn strcmp strncmp wcslen strlen strspn

api-ms-win-crt-heap-l1-1-0

free realloc _msize malloc _set_new_mode

api-ms-win-crt-utility-l1-1-0

_rotl64 qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-math-l1-1-0

__setusermatherr log _dclass fabs

api-ms-win-crt-runtime-l1-1-0

__p___argv _set_app_type _cexit __p___argc terminate _crt_atexit _register_onexit_function _initialize_onexit_table _c_exit _configure_narrow_argv _initialize_narrow_environment _register_thread_local_exe_atexit_callback _get_initial_narrow_environment _initterm_e exit _exit _seh_filter_exe _initterm _beginthreadex _endthreadex

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-25_9a85549f7c6dd3eb5ad442a5b8c936db_akira_glassworm_rusty-stealer

PE Signature issue

kernel32

api-ms-win-core-synch-l1-2-0

ws2_32

ntdll

crypt32

secur32

bcryptprimitives

oleaut32

user32

advapi32

shell32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic