2026-09-24_3436f9c49fb701b5e2e8bd85cf789ad5_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-24_3436f9c49fb701b5e2e8bd85cf789ad5_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc
Size 9.7MB
Sample260925-peeswsvhmf
SHA256 cfecdecca47b8a2c111aafec04980323ae6f757c6d48b70dc1142b14bdd45abc
MD5 3436f9c49fb701b5e2e8bd85cf789ad5
SHA1 13a44ab8ab367e1eaa43975e00b69769d1c17157
SHA512 29a01d9b71716040df5e53a8dba8d622a0d63cc9d7b9e90946e372a4bd5f1d537c234928e90f66b8c00c76b519b61ebfa4f414e33a3c4e2f50976a918a52bbdf
SSDEEP 98304:SMgR4cgwFr8+uvcxDV2WuSuByxezRRX+bxZ+sIb39RC:S4ljmB2JNXIxZu
TLSH
T1A2A648117A5AA5FDC16AC474834A4A736E6270DB0B25BAFB44C442393E7AEF41F3C718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-24_3436f9c49fb701b5e2e8bd85cf789ad5_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc

File Explorer

2026-09-24_3436f9c49fb701b5e2e8bd85cf789ad5_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc

.exe 9.7MB

2026-09-24_3436f9c49fb701b5e2e8bd85cf789ad5_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc

IMPHASH 2a377e2956f84ee614c044a898904d55
SHA256 cfecdecca47b8a2c111aafec04980323ae6f757c6d48b70dc1142b14bdd45abc
MD5 3436f9c49fb701b5e2e8bd85cf789ad5
SHA1 13a44ab8ab367e1eaa43975e00b69769d1c17157
SHA512 29a01d9b71716040df5e53a8dba8d622a0d63cc9d7b9e90946e372a4bd5f1d537c234928e90f66b8c00c76b519b61ebfa4f414e33a3c4e2f50976a918a52bbdf
SSDEEP 98304:SMgR4cgwFr8+uvcxDV2WuSuByxezRRX+bxZ+sIb39RC:S4ljmB2JNXIxZu
TLSH
T1A2A648117A5AA5FDC16AC474834A4A736E6270DB0B25BAFB44C442393E7AEF41F3C718
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6852892

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dump_syms.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

GetConsoleMode SetConsoleMode GetLastError GetConsoleScreenBufferInfo SetConsoleTextAttribute QueryPerformanceCounter HeapSize GetFileSizeEx lstrlenW CloseHandle SwitchToThread FindClose CreateThread WaitForSingleObject GetSystemInfo GetStdHandle HeapReAlloc FlushFileBuffers GetStringTypeW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP GetQueuedCompletionStatusEx CreateIoCompletionPort IsValidCodePage SetStdHandle PostQueuedCompletionStatus SetFileCompletionNotificationModes Sleep GetModuleHandleA GetProcAddress LCMapStringW GetSystemTimePreciseAsFileTime SystemTimeToTzSpecificLocalTime SystemTimeToFileTime HeapFree WideCharToMultiByte GetProcessHeap LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx CompareStringW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW GetModuleFileNameW CreateDirectoryW CreateFileW SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx GetFinalPathNameByHandleW FindFirstFileExW GetFileType SetHandleInformation VirtualProtect InitializeCriticalSectionEx GetModuleHandleW FormatMessageW ExitProcess QueryPerformanceFrequency FlsFree FlsSetValue GetFullPathNameW HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind FindNextFileW FlsGetValue FlsAlloc WaitForSingleObjectEx GetCurrentProcess OutputDebugStringW GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess RtlUnwindEx RtlPcToFileHeader RaiseException EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW WriteFile GetCommandLineA

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

ws2_32

connect shutdown getsockopt WSACleanup getaddrinfo WSASend getsockname WSAGetLastError WSAIoctl WSAStartup send freeaddrinfo closesocket setsockopt bind ioctlsocket WSASocketW recv getpeername

ntdll

NtCancelIoFileEx RtlNtStatusToDosError NtDeviceIoControlFile NtCreateFile NtReadFile NtWriteFile

Name

.text

Size

6.8MB

Virtual Size

6.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

279KB

Virtual Size

278KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-24_3436f9c49fb701b5e2e8bd85cf789ad5_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

shell32

ole32

bcrypt

advapi32

ws2_32

ntdll

generic