2026-08-25_9342354dd4be679e25779029e7425a43_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-25_9342354dd4be679e25779029e7425a43_akira_glassworm_rusty-stealer
Size 75.0MB
Sample260826-vrld4ataja
SHA256 1dbda71ae2aefe47098a3c91ad8261e69acb7d83a2a1dc5e9634762d8399948b
MD5 9342354dd4be679e25779029e7425a43
SHA1 e561ff5947bedba940c3eccde9007f99a8ba35ae
SHA512 d187901fee94020b240ec5023afb5278b132085351be93186e1990c70e90e54b76a2c65b84f0c71cb59e1ecaedc56aa91b3d3d1218a612e58a9a3feee29b2071
SSDEEP 1572864:15jmfknMNHrkMaNda6dZPQMwyz8skgHGc/V9qh5+mpx:OMnMFVaNF39wyzugH5VQh5h
TLSH
T10A083343FBA6A1EDC16AC13986165223FB32B84D072027EB56908A353F62FD16F7D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-25_9342354dd4be679e25779029e7425a43_akira_glassworm_rusty-stealer

File Explorer

2026-08-25_9342354dd4be679e25779029e7425a43_akira_glassworm_rusty-stealer

.exe 75.0MB

2026-08-25_9342354dd4be679e25779029e7425a43_akira_glassworm_rusty-stealer

IMPHASH 1013a086cedf570aab129fa3edbb5768
SHA256 1dbda71ae2aefe47098a3c91ad8261e69acb7d83a2a1dc5e9634762d8399948b
MD5 9342354dd4be679e25779029e7425a43
SHA1 e561ff5947bedba940c3eccde9007f99a8ba35ae
SHA512 d187901fee94020b240ec5023afb5278b132085351be93186e1990c70e90e54b76a2c65b84f0c71cb59e1ecaedc56aa91b3d3d1218a612e58a9a3feee29b2071
SSDEEP 1572864:15jmfknMNHrkMaNda6dZPQMwyz8skgHGc/V9qh5+mpx:OMnMFVaNF39wyzugH5VQh5h
TLSH
T10A083343FBA6A1EDC16AC13986165223FB32B84D072027EB56908A353F62FD16F7D354
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

03:e9:6f:a6:d5:e2:c3:a6:c1:a2:9f:98:a9:24:32:c4:76:0b:b6:96:58:43:4d:fa:bc:fb:f2:e9:8f:72:a2:8c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility

Chains

Aug 26, 2026

CN=Microsoft Windows Software Compatibility

Minor OS version

Major OS version

Entry point

3978720

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

spongebob_launcher.pdb

kernel32

SetFileTime SetFilePointerEx GetCurrentProcessId GetFileTime FreeLibrary LoadLibraryExA TerminateProcess GetExitCodeProcess WaitForMultipleObjects PostQueuedCompletionStatus GetFinalPathNameByHandleW SetLastError SetFileCompletionNotificationModes CreateIoCompletionPort GetProcessHeap IsProcessorFeaturePresent DuplicateHandle GetFileAttributesW CopyFileExW CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW SwitchToThread ReadFile HeapReAlloc GetCurrentThread SetThreadStackGuarantee GetLastError GetOverlappedResult CloseHandle CancelIo CreateEventW ExitProcess Sleep SetWaitableTimer CreateWaitableTimerExW ReadFileEx DeleteFileW FindNextFileW FindClose GetCurrentProcess GetModuleHandleA GetProcAddress GetModuleHandleW GetQueuedCompletionStatusEx SetHandleInformation CreateThread GetTempPathW GetModuleFileNameW GetSystemTimePreciseAsFileTime WaitForSingleObject GetFileInformationByHandleEx GetFileInformationByHandle SetFileInformationByHandle CreateFileW FindFirstFileExW GetFullPathNameW CreateDirectoryW HeapAlloc HeapFree ReleaseMutex CreateMutexA LoadLibraryA WaitForSingleObjectEx GetCurrentThreadId WriteFileEx SleepEx FormatMessageW InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection RaiseException AreFileApisANSI HeapCreate WriteFile GetDiskFreeSpaceW OutputDebugStringA LockFile SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx CreateMutexW UnmapViewOfFile HeapValidate HeapSize GetTempPathA GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA DeleteFileA GetSystemInfo LoadLibraryW HeapCompact HeapDestroy UnlockFile LocalFree LockFileEx GetFileSize SystemTimeToFileTime GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile GetTickCount FlushFileBuffers CompareStringOrdinal FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceFrequency IsDebuggerPresent GetEnvironmentVariableW WriteConsoleW MultiByteToWideChar GetConsoleOutputCP GetConsoleMode GetStdHandle WideCharToMultiByte lstrlenW GetCurrentDirectoryW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext QueryPerformanceCounter AddVectoredExceptionHandler

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

ws2_32

closesocket WSAIoctl ioctlsocket bind setsockopt getsockopt getsockname WSAGetLastError WSASend shutdown send recv freeaddrinfo getaddrinfo getpeername WSACleanup WSAStartup WSASocketW connect

ntdll

NtReadFile NtOpenFile NtWriteFile NtCreateNamedPipeFile NtCreateFile NtDeviceIoControlFile RtlNtStatusToDosError NtCancelIoFileEx

secur32

DecryptMessage QueryContextAttributesW FreeContextBuffer InitializeSecurityContextW ApplyControlToken DeleteSecurityContext FreeCredentialsHandle AcquireCredentialsHandleA EncryptMessage AcceptSecurityContext

crypt32

CertAddCertificateContextToStore CertEnumCertificatesInStore CertDuplicateCertificateChain CertDuplicateCertificateContext CertDuplicateStore CertCloseStore CertFreeCertificateContext CertOpenStore CertVerifyCertificateChainPolicy CertFreeCertificateChain CertGetCertificateChain

oleaut32

SysStringLen SysFreeString GetErrorInfo

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW

shell32

ShellExecuteW SHGetKnownFolderPath

user32

EnumDisplayMonitors GetDC SetProcessDPIAware ReleaseDC

gdi32

DeleteObject GetDIBits BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC DeleteDC

vcruntime140

memcmp memcpy memmove memset strrchr __current_exception_context __current_exception __C_specific_handler __CxxFrameHandler3

api-ms-win-crt-string-l1-1-0

wcslen strcspn strspn strncmp strcmp strlen

api-ms-win-crt-heap-l1-1-0

_msize malloc _set_new_mode realloc free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_cexit _initialize_onexit_table __p___argv _seh_filter_exe _set_app_type _c_exit _configure_narrow_argv _initialize_narrow_environment _register_thread_local_exe_atexit_callback __p___argc _register_onexit_function _exit exit _initterm_e _initterm _beginthreadex _get_initial_narrow_environment _crt_atexit _endthreadex terminate

api-ms-win-crt-math-l1-1-0

log __setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-25_9342354dd4be679e25779029e7425a43_akira_glassworm_rusty-stealer

PE Signature issue

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ws2_32

ntdll

secur32

crypt32

oleaut32

advapi32

shell32

user32

gdi32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic