2026-09-25_e2d2a0807b28f5083e1c1a21190fd7b1_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-25_e2d2a0807b28f5083e1c1a21190fd7b1_akira_glassworm_rusty-stealer
Size 8.7MB
Sample260925-wzerysgf36
SHA256 0064ffaa30846af7d6f92533c687c09c1d08f779727f7893e8ad9b5152e33ca6
MD5 e2d2a0807b28f5083e1c1a21190fd7b1
SHA1 9072f0cfce1f35cf5e12ce5663ee6210da5f083c
SHA512 415c9e360c8df4c7e93f27b2b90bc15d7d881580799a828ca5e2530906c5415a7dfe09f578a577a7cf5196333563ed74ecadcc825ebbfc5e03a6295ecc924207
SSDEEP 98304:ZkZGm6Cb+p9iMR/sNzBPWO7xZNMWVjxPl2b+b:Z9rRgFZNM4j9
TLSH
T13A96C516B77950D9C1BBC0B882879B22B921748D07397BF74AC086662F24FF8AD7D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-25_e2d2a0807b28f5083e1c1a21190fd7b1_akira_glassworm_rusty-stealer

File Explorer

2026-09-25_e2d2a0807b28f5083e1c1a21190fd7b1_akira_glassworm_rusty-stealer

.exe 8.7MB

2026-09-25_e2d2a0807b28f5083e1c1a21190fd7b1_akira_glassworm_rusty-stealer

IMPHASH 642c540d4c471a590b602a29eb5a0cdb
SHA256 0064ffaa30846af7d6f92533c687c09c1d08f779727f7893e8ad9b5152e33ca6
MD5 e2d2a0807b28f5083e1c1a21190fd7b1
SHA1 9072f0cfce1f35cf5e12ce5663ee6210da5f083c
SHA512 415c9e360c8df4c7e93f27b2b90bc15d7d881580799a828ca5e2530906c5415a7dfe09f578a577a7cf5196333563ed74ecadcc825ebbfc5e03a6295ecc924207
SSDEEP 98304:ZkZGm6Cb+p9iMR/sNzBPWO7xZNMWVjxPl2b+b:Z9rRgFZNM4j9
TLSH
T13A96C516B77950D9C1BBC0B882879B22B921748D07397BF74AC086662F24FF8AD7D354
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6655568

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

authenticode-7f2402658eaef9e1.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead CloseHandle GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx GetLastError SetFileInformationByHandle DuplicateHandle WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetCommandLineW GetFileInformationByHandleEx SwitchToThread CreateFileW GetOverlappedResult GetFileInformationByHandle FindFirstFileExW FindClose GetConsoleMode GetFileType GetFullPathNameW GetCurrentThreadId GetModuleHandleA GetModuleFileNameW GetModuleHandleW FormatMessageW ExitProcess WaitForMultipleObjects ReadFileEx SleepEx ReadFile QueryPerformanceFrequency CancelIo HeapAlloc MultiByteToWideChar WriteConsoleW GetConsoleOutputCP CreateThread FreeEnvironmentStringsW GetFileAttributesW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW WriteFileEx GetSystemTimePreciseAsFileTime QueryPerformanceCounter GetSystemInfo GetExitCodeProcess IsProcessorFeaturePresent RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimeAsFileTime CreateEventW RtlCaptureContext

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

ntdll

NtCreateNamedPipeFile RtlNtStatusToDosError NtReadFile NtWriteFile NtOpenFile

userenv

GetUserProfileDirectoryW

vcruntime140

_CxxThrowException __current_exception_context __current_exception memmove memset __C_specific_handler memcmp memcpy __CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

log2 round pow fmod __setusermatherr log floor

api-ms-win-crt-runtime-l1-1-0

_set_app_type _initialize_narrow_environment _get_initial_narrow_environment _seh_filter_exe _initterm_e exit _exit _c_exit __p___argc __p___argv _cexit terminate _register_thread_local_exe_atexit_callback _initterm _configure_narrow_argv _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-25_e2d2a0807b28f5083e1c1a21190fd7b1_akira_glassworm_rusty-stealer

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

bcrypt

advapi32

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic