2026-09-01_213db152a0a4b48660c7f34f4d28eaaf_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-01_213db152a0a4b48660c7f34f4d28eaaf_akira_glassworm_rusty-stealer
Size 10.9MB
Sample260903-sgqjysar21
SHA256 f66ff690023848c8c7509592b9b9ba189db1bc8e18aee75d496f2631b0139d97
MD5 213db152a0a4b48660c7f34f4d28eaaf
SHA1 7b57f3ed5ba224805e9acc33adeb0f33c31c9360
SHA512 e0334e9a9086798c1afa84e776f2c09689d450726790e8fd5a6a99410c132b03be3f8f77cc5eefe90efc628076e2655f33eecfcaca4af7d879fedbad71e626f7
SSDEEP 196608:hPF6NgKlczeBP/2Jwk/YNqbWbdPbXHUK7:hPY7lcE2GDHUS
TLSH
T101B6E716A67960D9C1BBC0B892839F22BD3174D907397BF745C0826A2F21EF8AD3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-01_213db152a0a4b48660c7f34f4d28eaaf_akira_glassworm_rusty-stealer

File Explorer

2026-09-01_213db152a0a4b48660c7f34f4d28eaaf_akira_glassworm_rusty-stealer

.exe 10.9MB

2026-09-01_213db152a0a4b48660c7f34f4d28eaaf_akira_glassworm_rusty-stealer

IMPHASH b6ff8699e5cc7bf1df7b55a12def103b
SHA256 f66ff690023848c8c7509592b9b9ba189db1bc8e18aee75d496f2631b0139d97
MD5 213db152a0a4b48660c7f34f4d28eaaf
SHA1 7b57f3ed5ba224805e9acc33adeb0f33c31c9360
SHA512 e0334e9a9086798c1afa84e776f2c09689d450726790e8fd5a6a99410c132b03be3f8f77cc5eefe90efc628076e2655f33eecfcaca4af7d879fedbad71e626f7
SSDEEP 196608:hPF6NgKlczeBP/2Jwk/YNqbWbdPbXHUK7:hPY7lcE2GDHUS
TLSH
T101B6E716A67960D9C1BBC0B892839F22BD3174D907397BF745C0826A2F21EF8AD3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8508780

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

scadaver-800e5c6eb960fe94.pdb

kernel32

UnlockFile HeapDestroy HeapCompact HeapAlloc LoadLibraryW GetSystemInfo HeapReAlloc DeleteFileW DeleteFileA WaitForSingleObjectEx LoadLibraryA CreateFileA FlushViewOfFile GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapSize HeapValidate UnmapViewOfFile GetFileAttributesW WaitForSingleObject CreateMutexW GetTempPathW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile GetDiskFreeSpaceW GetFullPathNameW HeapFree HeapCreate AreFileApisANSI GetCurrentThreadId LockFileEx GetFileSize GetCurrentProcessId GetProcessHeap FreeLibrary GetSystemTimeAsFileTime GetSystemTime CreateFileMappingW MapViewOfFile GetTickCount lstrlenW FlushFileBuffers GetFileInformationByHandleEx QueryPerformanceCounter FormatMessageA WideCharToMultiByte OutputDebugStringW FormatMessageW MultiByteToWideChar OutputDebugStringA RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection RtlVirtualUnwind CloseHandle FreeEnvironmentStringsW CompareStringOrdinal AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SwitchToThread CreateWaitableTimerExW SetWaitableTimer RtlCaptureContext RtlLookupFunctionEntry SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetCommandLineW SetFileInformationByHandle GetCurrentProcess DuplicateHandle SetFilePointerEx WriteConsoleW WriteFileEx SleepEx GetExitCodeProcess TerminateProcess QueryPerformanceFrequency GetSystemTimePreciseAsFileTime FindFirstFileExW FindClose ReleaseMutex CreateEventW CancelIo GetModuleHandleW GetModuleFileNameW ExitProcess CreateNamedPipeW ReadFileEx CreateThread GetFileInformationByHandle CreateDirectoryW GetFileType GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetConsoleOutputCP CreateMutexA CreateFileW LocalFree GetConsoleMode IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle WaitForMultipleObjects InitializeSListHead GetProcAddress WriteFile GetOverlappedResult ReadFile SetHandleInformation GetModuleHandleA Sleep GetLastError SystemTimeToFileTime IsDebuggerPresent

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

ws2_32

WSAGetLastError select WSAStartup WSACleanup freeaddrinfo getaddrinfo setsockopt getsockopt sendto WSASend send recvfrom WSARecv recv shutdown WSADuplicateSocketW getpeername getsockname connect bind WSASocketW closesocket ioctlsocket

ntdll

RtlNtStatusToDosError NtWriteFile NtReadFile

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

userenv

GetUserProfileDirectoryW

vcruntime140

strchr memcpy __CxxFrameHandler3 memset memchr __current_exception_context __current_exception memmove _CxxThrowException __C_specific_handler strrchr memcmp

api-ms-win-crt-string-l1-1-0

strncmp strcmp strlen strcspn strspn

api-ms-win-crt-math-l1-1-0

log _dclass fmod floor __setusermatherr fabs

api-ms-win-crt-heap-l1-1-0

realloc free malloc _msize _set_new_mode

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_endthreadex __p___argv _exit terminate _register_thread_local_exe_atexit_callback _c_exit _cexit _set_app_type _initialize_onexit_table exit _initterm_e _register_onexit_function _beginthreadex _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _crt_atexit __p___argc _seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-01_213db152a0a4b48660c7f34f4d28eaaf_akira_glassworm_rusty-stealer

kernel32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

ws2_32

ntdll

bcrypt

advapi32

shell32

ole32

userenv

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic