2026-09-24_44985c7a0187e48a6b9a50c9cf2f56c1_akira_glassworm_icedid_megazord_rusty-stealer_ryuk

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-24_44985c7a0187e48a6b9a50c9cf2f56c1_akira_glassworm_icedid_megazord_rusty-stealer_ryuk
Size 9.3MB
Sample260925-m7p38avalc
SHA256 9334c9dd99e532bb9ed043a4e82aac6aa5c78047833650b5ce55b3fc0238bb59
MD5 44985c7a0187e48a6b9a50c9cf2f56c1
SHA1 41068547e846d7d15746325a6048c5b6dddbc0ca
SHA512 79fa37aae8c096cb3845b591bf42f00f2727ab903ab53a8ea49862f6bb105eaac6c28718ec7f5bed1cf7935e1aadcb7290a9f2b3162c49aef29bfb42c25c29ac
SSDEEP 98304:C2zL81vhflTBcjh02Ry+qsOWKu/GphFFQx+RDDNrSXAxq0Ma:4+hSQxcrQ0M
TLSH
T1E1A65B22BB5A55EDC19AC07483464672AA3170CB0B35BAFF44D492393F6AAF15F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-24_44985c7a0187e48a6b9a50c9cf2f56c1_akira_glassworm_icedid_megazord_rusty-stealer_ryuk

File Explorer

2026-09-24_44985c7a0187e48a6b9a50c9cf2f56c1_akira_glassworm_icedid_megazord_rusty-stealer_ryuk

.exe 9.3MB

2026-09-24_44985c7a0187e48a6b9a50c9cf2f56c1_akira_glassworm_icedid_megazord_rusty-stealer_ryuk

IMPHASH dd4cc8b7700264a6a89580bb461bf12c
SHA256 9334c9dd99e532bb9ed043a4e82aac6aa5c78047833650b5ce55b3fc0238bb59
MD5 44985c7a0187e48a6b9a50c9cf2f56c1
SHA1 41068547e846d7d15746325a6048c5b6dddbc0ca
SHA512 79fa37aae8c096cb3845b591bf42f00f2727ab903ab53a8ea49862f6bb105eaac6c28718ec7f5bed1cf7935e1aadcb7290a9f2b3162c49aef29bfb42c25c29ac
SSDEEP 98304:C2zL81vhflTBcjh02Ry+qsOWKu/GphFFQx+RDDNrSXAxq0Ma:4+hSQxcrQ0M
TLSH
T1E1A65B22BB5A55EDC19AC07483464672AA3170CB0B35BAFF44D492393F6AAF15F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6222984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

warp_updater.pdb

bcryptprimitives

ProcessPrng

kernel32

AddVectoredExceptionHandler AreFileApisANSI CancelIo CancelIoEx CloseHandle CompareStringOrdinal CompareStringW CreateDirectoryW CreateFileA CreateFileMappingW CreateFileW CreateIoCompletionPort CreateMutexA CreateMutexW CreateProcessW CreateSemaphoreW CreateThread DeleteCriticalSection DeleteFileA DeleteFileW DeviceIoControl DuplicateHandle EncodePointer EnterCriticalSection ExitProcess ExitThread FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceA GetDiskFreeSpaceW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSize GetFileType GetFinalPathNameByHandleW GetFullPathNameA GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetOverlappedResult GetProcAddress GetProcessHeap GetQueuedCompletionStatusEx GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathA GetTempPathW GetTickCount GetTimeZoneInformation GetWindowsDirectoryW HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize HeapValidate InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LocalFree LockFile LockFileEx MapViewOfFile MoveFileExW MultiByteToWideChar OutputDebugStringA OutputDebugStringW PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadDirectoryChangesW ReadFile ReadFileEx RegisterWaitForSingleObject ReleaseMutex ReleaseSemaphore RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetEndOfFile SetEnvironmentVariableW SetFileAttributesW SetFileCompletionNotificationModes SetFileInformationByHandle SetFilePointer SetFilePointerEx SetFileTime SetHandleInformation SetLastError SetNamedPipeHandleState SetStdHandle SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep SleepEx SwitchToThread SystemTimeToFileTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter UnlockFile UnlockFileEx UnmapViewOfFile UnregisterWaitEx VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile WriteFileEx lstrlenW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegOpenKeyExW RegQueryValueExW RegisterServiceCtrlHandlerExW SetServiceStatus StartServiceCtrlDispatcherW SystemFunction036

ws2_32

WSACleanup WSAGetLastError WSAIoctl WSASend WSASocketW WSAStartup bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket recv send setsockopt shutdown

ntdll

NtCancelIoFileEx NtCreateFile NtCreateNamedPipeFile NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

shell32

SHGetKnownFolderPath

psapi

EnumProcessModules GetModuleFileNameExW GetModuleInformation

user32

GetSystemMetrics

bcrypt

BCryptGenRandom

combase

CoTaskMemFree

Name

.text

Size

6.1MB

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

31KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

291KB

Virtual Size

290KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

746B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

560B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

612KB

Virtual Size

616KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-24_44985c7a0187e48a6b9a50c9cf2f56c1_akira_glassworm_icedid_megazord_rusty-stealer_ryuk

bcryptprimitives

kernel32

api-ms-win-core-synch-l1-2-0

advapi32

ws2_32

ntdll

shell32

psapi

user32

bcrypt

combase

generic