2026-09-10_b26ae6ff1bcba7a7bd916721f2ba88d3_akira_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-10_b26ae6ff1bcba7a7bd916721f2ba88d3_akira_elex_glassworm
Size 10.9MB
Sample260910-n12dcasena
SHA256 62559a0ee42f86f0da760cc7d643f687eec401517bbd720467bb20a0c7992712
MD5 b26ae6ff1bcba7a7bd916721f2ba88d3
SHA1 31521429ff9ca0c4c5940cde683209f7cbd28219
SHA512 cd9ba22ff455408adb5ae993e479f794e96a563deb1a621c696cf9f275d94052ca637a48b817f7f12be9a623893d5e1c5f152a0f9f14f9101e0db701eb08cfc2
SSDEEP 196608:9MIMct8D84UvqWRALMTg2qD6HLNVlZY9WW6KcMm+ZHHgEXiKLNTwFkzSnAVO4dOR:Z084oquXTgZc7ln3p6HgEXiKhRdO/Kd6
TLSH
T12AB68E1273C58535E5E203706DE8A71E41FDBE744972C60BA3C41A4EEAF2AD25B1372B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-09-10_b26ae6ff1bcba7a7bd916721f2ba88d3_akira_elex_glassworm

.exe 10.9MB

2026-09-10_b26ae6ff1bcba7a7bd916721f2ba88d3_akira_elex_glassworm

SHA256 62559a0ee42f86f0da760cc7d643f687eec401517bbd720467bb20a0c7992712
MD5 b26ae6ff1bcba7a7bd916721f2ba88d3
SHA1 31521429ff9ca0c4c5940cde683209f7cbd28219
SHA512 cd9ba22ff455408adb5ae993e479f794e96a563deb1a621c696cf9f275d94052ca637a48b817f7f12be9a623893d5e1c5f152a0f9f14f9101e0db701eb08cfc2
SSDEEP 196608:9MIMct8D84UvqWRALMTg2qD6HLNVlZY9WW6KcMm+ZHHgEXiKLNTwFkzSnAVO4dOR:Z084oquXTgZc7ln3p6HgEXiKhRdO/Kd6
TLSH
T12AB68E1273C58535E5E203706DE8A71E41FDBE744972C60BA3C41A4EEAF2AD25B1372B
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

d5:30:de:7a:ab:94:ee:e6:80:33:45:50:ca:44:35:06:69:e8:38:49:1e:f3:bd:22:be:c0:52:8c:30:72:d7:a3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 24, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

d5:30:de:7a:ab:94:ee:e6:80:33:45:50:ca:44:35:06:69:e8:38:49:1e:f3:bd:22:be:c0:52:8c:30:72:d7:a3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 24, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:1c:48:9f:81:df:a1:b0:b7:77:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 8, 2024 - Jun 23, 2035

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c3:33:ab:2c:1a:f5:42:f2:c8:00:00:00:00:00:c3

Issuer

CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2025 - Jun 18, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:23:4f:d9:60:24:53:cf:fe:2b:00:01:00:00:02:23

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 19, 2026 - May 17, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b9:77:d5:eb:af:db:70:7b:64:00:00:00:00:00:b9

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 13, 2025 - Nov 10, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:20:24:e1:e6:e0:17:b9:b4:8e:00:01:00:00:02:20

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 19, 2026 - May 17, 2027

Minor OS version

Major OS version

Entry point

6868965

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\dbs\el\omr\Target\x86\ship\postc2r\x-none\protocolhandler.pdb

Name

.text

Size

7.0MB

Virtual Size

7.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

265KB

Virtual Size

318KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.c2r

Size

512B

Virtual Size

380B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

165KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

544KB

Virtual Size

543KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-10_b26ae6ff1bcba7a7bd916721f2ba88d3_akira_elex_glassworm

generic