2026-09-01_64eba163d21d634ddc0a06331e706cf7_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-01_64eba163d21d634ddc0a06331e706cf7_akira_glassworm_rusty-stealer
Size 20.3MB
Sample260903-mxff2afn6v
SHA256 072b565ce6153bd920438327ef5708fdee0571b1c5624b7e3e373091fd15f32d
MD5 64eba163d21d634ddc0a06331e706cf7
SHA1 cb2181dc792b85e9478cb358187934ddb58fe66d
SHA512 9711fae7286e4e5d5216b041d4ec78503aa3e078094115440128ffe7467fd78cd46f71087438d6f71417bc8b5b52176e6f450a0c9ab4a20b647eccd7a4bf1499
SSDEEP 98304:hqeWxHC2/fukQ9vhYCmFvL1gpbmtXKDmb+UMtGOrDHmjw+i3OW8:hqP/YhYCmFvJmbYfn/w+W8
TLSH
T10427E816A67960D9C1BBC078D2839F62BD2170D907393BF789D1826A1F24EF8AD3D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-01_64eba163d21d634ddc0a06331e706cf7_akira_glassworm_rusty-stealer

File Explorer

2026-09-01_64eba163d21d634ddc0a06331e706cf7_akira_glassworm_rusty-stealer

.exe 20.3MB

2026-09-01_64eba163d21d634ddc0a06331e706cf7_akira_glassworm_rusty-stealer

IMPHASH 30e8559fcfab4638011fc7f529d23c3a
SHA256 072b565ce6153bd920438327ef5708fdee0571b1c5624b7e3e373091fd15f32d
MD5 64eba163d21d634ddc0a06331e706cf7
SHA1 cb2181dc792b85e9478cb358187934ddb58fe66d
SHA512 9711fae7286e4e5d5216b041d4ec78503aa3e078094115440128ffe7467fd78cd46f71087438d6f71417bc8b5b52176e6f450a0c9ab4a20b647eccd7a4bf1499
SSDEEP 98304:hqeWxHC2/fukQ9vhYCmFvL1gpbmtXKDmb+UMtGOrDHmjw+i3OW8:hqP/YhYCmFvJmbYfn/w+W8
TLSH
T10427E816A67960D9C1BBC078D2839F62BD2170D907393BF789D1826A1F24EF8AD3D354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15756288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

scadaver.pdb

kernel32

UnlockFile HeapDestroy HeapCompact HeapAlloc LoadLibraryW GetSystemInfo HeapReAlloc DeleteFileW DeleteFileA WaitForSingleObjectEx LoadLibraryA CreateFileA FlushViewOfFile GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapSize HeapValidate UnmapViewOfFile GetFileAttributesW WaitForSingleObject CreateMutexW GetTempPathW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile GetDiskFreeSpaceW GetFullPathNameW HeapFree HeapCreate AreFileApisANSI GetCurrentThreadId LockFileEx GetFileSize GetCurrentProcessId GetProcessHeap FreeLibrary GetSystemTimeAsFileTime GetSystemTime CreateFileMappingW MapViewOfFile GetTickCount lstrlenW FlushFileBuffers GetFileInformationByHandleEx GetConsoleCursorInfo QueryPerformanceCounter FormatMessageA WideCharToMultiByte OutputDebugStringW FormatMessageW MultiByteToWideChar OutputDebugStringA RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection RtlVirtualUnwind CloseHandle GetStdHandle CreateFileW FreeEnvironmentStringsW CompareStringOrdinal AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SwitchToThread CreateWaitableTimerExW SetWaitableTimer RtlCaptureContext RtlLookupFunctionEntry SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetConsoleMode GetCommandLineW SetFileInformationByHandle GetCurrentProcess DuplicateHandle SetConsoleMode WriteFileEx SleepEx TerminateProcess QueryPerformanceFrequency GetSystemTimePreciseAsFileTime FindFirstFileExW FindClose ReleaseMutex GetConsoleScreenBufferInfo GetModuleHandleW GetModuleFileNameW ExitProcess CreateNamedPipeW ReadFileEx CreateThread SetConsoleActiveScreenBuffer GetFileInformationByHandle CreateDirectoryW GetFinalPathNameByHandleW GetFileType CreateConsoleScreenBuffer GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetConsoleOutputCP ReadConsoleW CreateMutexA ReadConsoleInputW GetNumberOfConsoleInputEvents WriteConsoleW LocalFree FillConsoleOutputAttribute FillConsoleOutputCharacterA SetConsoleTextAttribute WaitForMultipleObjects IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetConsoleCursorInfo SetConsoleCursorPosition InitializeSListHead GetProcAddress WriteFile ReadFile SetFileCompletionNotificationModes PostQueuedCompletionStatus GetQueuedCompletionStatusEx CreateIoCompletionPort SetHandleInformation GetModuleHandleA Sleep GetLastError SystemTimeToFileTime IsDebuggerPresent

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

ws2_32

WSAGetLastError select WSAStartup WSACleanup freeaddrinfo getaddrinfo setsockopt getsockopt WSAIoctl sendto WSASend send recvfrom WSARecv recv shutdown WSADuplicateSocketW getpeername getsockname accept listen connect bind WSASocketW closesocket ioctlsocket

ntdll

NtCreateFile RtlNtStatusToDosError NtCancelIoFileEx NtWriteFile NtReadFile NtDeviceIoControlFile

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

user32

GetKeyboardLayout ToUnicodeEx GetForegroundWindow GetWindowThreadProcessId

iphlpapi

ConvertInterfaceLuidToIndex GetAdaptersAddresses ConvertLengthToIpv4Mask

vcruntime140

strchr memcpy __CxxFrameHandler3 memcmp memchr __current_exception_context __current_exception memset _CxxThrowException __C_specific_handler strrchr memmove

api-ms-win-crt-string-l1-1-0

strncmp strlen wcslen strspn strcmp strcspn

api-ms-win-crt-math-l1-1-0

__setusermatherr _dclass fabs pow truncf log trunc ceil round

api-ms-win-crt-heap-l1-1-0

realloc free malloc _msize _set_new_mode

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _get_initial_narrow_environment terminate _crt_atexit _initialize_narrow_environment _configure_narrow_argv _set_app_type _initterm_e exit _seh_filter_exe _endthreadex _beginthreadex _initialize_onexit_table _register_onexit_function _initterm

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-01_64eba163d21d634ddc0a06331e706cf7_akira_glassworm_rusty-stealer

kernel32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

ws2_32

ntdll

bcrypt

advapi32

shell32

ole32

user32

iphlpapi

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic