2026-09-01_0135a28fc1f61d2a79c0f62b862cb7b5_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-01_0135a28fc1f61d2a79c0f62b862cb7b5_akira_glassworm_rusty-stealer
Size 4.2MB
Sample260901-2ecpraydjf
SHA256 008a5634f86dfc9650c899f252d55acd565f5c232a31cedd2969970398431940
MD5 0135a28fc1f61d2a79c0f62b862cb7b5
SHA1 a43e4098f687541cdcdb73949ccc7deb242ef532
SHA512 c8096f0585baf11db00126a429159f8887f1b333e0bade1af0c5834bfec472645659b2bec3afe0fd077c9491d0e2f30804309c4156efa3546cdde38dd5bcb576
SSDEEP 49152:9y2p/sUwfcibLqpLrN2sr0uWlFUD9o9+0NTlh1o1HkCEa5TBb62QT7Ig9YIU6iV:8nqN2Sq+W+1Hkq5TB49n+V
TLSH
T138166C03F2A180ECC06EC5B5D35AA633E732B88D493476EB5BE41B212F5AF506B1D749
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-01_0135a28fc1f61d2a79c0f62b862cb7b5_akira_glassworm_rusty-stealer

File Explorer

2026-09-01_0135a28fc1f61d2a79c0f62b862cb7b5_akira_glassworm_rusty-stealer

.exe 4.2MB

2026-09-01_0135a28fc1f61d2a79c0f62b862cb7b5_akira_glassworm_rusty-stealer

IMPHASH 138875511b4059d4b93dbb422307db02
SHA256 008a5634f86dfc9650c899f252d55acd565f5c232a31cedd2969970398431940
MD5 0135a28fc1f61d2a79c0f62b862cb7b5
SHA1 a43e4098f687541cdcdb73949ccc7deb242ef532
SHA512 c8096f0585baf11db00126a429159f8887f1b333e0bade1af0c5834bfec472645659b2bec3afe0fd077c9491d0e2f30804309c4156efa3546cdde38dd5bcb576
SSDEEP 49152:9y2p/sUwfcibLqpLrN2sr0uWlFUD9o9+0NTlh1o1HkCEa5TBb62QT7Ig9YIU6iV:8nqN2Sq+W+1Hkq5TB49n+V
TLSH
T138166C03F2A180ECC06EC5B5D35AA633E732B88D493476EB5BE41B212F5AF506B1D749
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3202624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

claudecc.pdb

bcryptprimitives

ProcessPrng

ntdll

RtlGetVersion NtCreateNamedPipeFile NtWriteFile RtlNtStatusToDosError NtOpenFile NtReadFile

kernel32

LoadLibraryA RtlPcToFileHeader RaiseException EncodePointer IsProcessorFeaturePresent TlsAlloc GetModuleHandleW GetUserDefaultUILanguage TlsGetValue LCIDToLocaleName TlsSetValue TlsFree InitializeSListHead UnhandledExceptionFilter SetUnhandledExceptionFilter RtlUnwindEx IsDebuggerPresent LoadLibraryW SwitchToThread GetSystemTimePreciseAsFileTime GetExitCodeProcess RtlLookupFunctionEntry WaitForSingleObjectEx GetCurrentProcess GetCurrentProcessId WideCharToMultiByte ReleaseMutex MultiByteToWideChar HeapAlloc WaitForSingleObject SleepEx FormatMessageW SetHandleInformation ExitProcess GetSystemDirectoryW GetWindowsDirectoryW GetModuleFileNameW DuplicateHandle WaitForMultipleObjects SetWaitableTimer GetSystemTimeAsFileTime HeapReAlloc HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee GetModuleHandleA CreateWaitableTimerExW CreateProcessW FreeEnvironmentStringsW GetEnvironmentStringsW ReadFile GetOverlappedResult CancelIo CreateEventW CreateDirectoryW CreateFileW CreateThread QueryPerformanceCounter QueryPerformanceFrequency WriteFileEx ReadFileEx GetEnvironmentVariableW CreateMutexA GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext Sleep GetProcAddress GetCommandLineW GetLastError SetEnvironmentVariableW AddVectoredExceptionHandler FindNextFileW GetTempPathW GetFileAttributesW GetFileInformationByHandle FindFirstFileExW SleepConditionVariableSRW SetFileTime GetFullPathNameW WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle GetFinalPathNameByHandleW CopyFileExW FindClose SetFileInformationByHandle DeleteFileW InitializeCriticalSectionAndSpinCount GetFileInformationByHandleEx CloseHandle TerminateProcess GetSystemInfo WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive FreeLibrary GetCurrentThreadId lstrlenW DeleteCriticalSection SetLastError CompareStringOrdinal LoadLibraryExW OutputDebugStringW LoadLibraryExA OutputDebugStringA

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

user32

IsWindow IsWindowEnabled IsIconic IsWindowVisible EnableWindow FlashWindowEx SetPropW GetKeyboardState SetWindowTextW GetWindowTextW GetWindowTextLengthW SetWindowDisplayAffinity MonitorFromRect ToUnicodeEx GetForegroundWindow MapVirtualKeyExW GetKeyboardLayout ClipCursor GetSystemMetrics GetClipCursor LoadCursorW SetCursor SetCursorPos MonitorFromPoint EnumDisplayMonitors AdjustWindowRect RedrawWindow PostMessageW InvalidateRect GetWindowLongPtrW ShowCursor SystemParametersInfoW UpdateWindow GetAsyncKeyState SetWindowLongW GetSystemMenu GetKeyState GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW DefWindowProcW RegisterRawInputDevices ScreenToClient RegisterClassExW CreateWindowExW SetWindowPos GetMessageA TranslateMessage DispatchMessageA EnumChildWindows GetTouchInputInfo AdjustWindowRectEx GetMenu GetWindowLongW InvalidateRgn ReleaseCapture CloseTouchInputHandle TrackMouseEvent FindWindowExW RegisterTouchWindow RegisterWindowMessageA GetParent SetWindowRgn GetWindow IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos EnableMenuItem DrawIconEx GetDC VkKeyScanW AppendMenuW InsertMenuW SendInput CheckMenuItem DrawTextW ReleaseDC FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo ShowWindow SendMessageW PostQuitMessage SystemParametersInfoA GetActiveWindow SetMenu RemoveMenu CreateIcon SetMenuItemInfoW DrawMenuBar CreatePopupMenu CreateMenu CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu SetParent GetMonitorInfoW TranslateAcceleratorW MsgWaitForMultipleObjectsEx MapVirtualKeyW GetUpdateRect PeekMessageW PostThreadMessageW ValidateRect GetRawInputData GetMenuItemInfoW SetWindowLongPtrW DispatchMessageW GetMessageW DestroyWindow SetFocus SetCapture

comctl32

SetWindowSubclass RemoveWindowSubclass DefSubclassProc TaskDialogIndirect

oleaut32

SysStringLen GetErrorInfo SetErrorInfo SysFreeString

ole32

CoCreateFreeThreadedMarshaler CoInitializeEx CoCreateInstance CoUninitialize RevokeDragDrop RegisterDragDrop OleInitialize CoTaskMemFree CoTaskMemAlloc

shlwapi

SHCreateMemStream

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

shell32

SHCreateItemFromParsingName ShellExecuteW SHAppBarMessage DragFinish DragQueryFileW SHGetKnownFolderPath

gdi32

CombineRgn BitBlt CreateRectRgn CreateDIBSection GetDeviceCaps DeleteObject CreateSolidBrush DeleteDC SetBkMode SetTextColor SelectObject CreateCompatibleDC

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey EventUnregister EventWriteTransfer RegGetValueW EventSetInformation SystemFunction036 EventRegister

bcrypt

BCryptGenRandom

ws2_32

connect recv WSARecv getpeername getaddrinfo freeaddrinfo send WSASend select setsockopt ioctlsocket getsockopt closesocket WSASocketW WSACleanup WSAStartup WSAGetLastError getsockname WSADuplicateSocketW

api-ms-win-crt-string-l1-1-0

wcscmp wcsncmp _wcsicmp wcslen strcpy_s strcmp strlen

api-ms-win-crt-math-l1-1-0

round __setusermatherr floor pow roundf trunc

api-ms-win-crt-convert-l1-1-0

_wtoi _ultow_s wcstol

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e exit _get_initial_narrow_environment _initialize_narrow_environment __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv terminate _set_app_type _initialize_onexit_table _exit _seh_filter_exe abort _crt_atexit __p___argc _register_onexit_function

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _callnewh calloc malloc _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-01_0135a28fc1f61d2a79c0f62b862cb7b5_akira_glassworm_rusty-stealer

bcryptprimitives

ntdll

kernel32

api-ms-win-core-synch-l1-2-0

user32

comctl32

oleaut32

ole32

shlwapi

dwmapi

shell32

gdi32

advapi32

bcrypt

ws2_32

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic