2026-10-10_a057118919ea4a2a98698a893be357da_akira_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-10_a057118919ea4a2a98698a893be357da_akira_elex_glassworm
Size 12.7MB
Sample261011-hs7bqsdf53
SHA256 27080af3bd4bd0c98b6b6b4ffbff268c0937b727791697630b484cccefa36a5f
MD5 a057118919ea4a2a98698a893be357da
SHA1 177e9f7c699ae05545f12ca269e35d04c3966942
SHA512 c27b4546b392e8ebd65e240057ff4aa389572a5782451e066ea5970e17fb702497eee8e0960e409888c398581a85acbd8e2aeaf22e465aced2ee1f7310725c2d
SSDEEP 393216:UmeYG3MFdMknEcnsTyFB2bGhvRuCTUOAUR+aope:nvFLRhop
TLSH
T1DDD628177601E1FFC51B41F0600EE3384AB355246355C9E7E2E0AEB86DEA6D12E26B3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_a057118919ea4a2a98698a893be357da_akira_elex_glassworm

File Explorer

2026-10-10_a057118919ea4a2a98698a893be357da_akira_elex_glassworm

.exe 12.7MB

2026-10-10_a057118919ea4a2a98698a893be357da_akira_elex_glassworm

IMPHASH 89dab4509906a728c5e7d3be597bb08c
SHA256 27080af3bd4bd0c98b6b6b4ffbff268c0937b727791697630b484cccefa36a5f
MD5 a057118919ea4a2a98698a893be357da
SHA1 177e9f7c699ae05545f12ca269e35d04c3966942
SHA512 c27b4546b392e8ebd65e240057ff4aa389572a5782451e066ea5970e17fb702497eee8e0960e409888c398581a85acbd8e2aeaf22e465aced2ee1f7310725c2d
SSDEEP 393216:UmeYG3MFdMknEcnsTyFB2bGhvRuCTUOAUR+aope:nvFLRhop
TLSH
T1DDD628177601E1FFC51B41F0600EE3384AB355246355C9E7E2E0AEB86DEA6D12E26B3D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10162032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

squawk.pdb

kernel32

Sleep CloseHandle GetProcAddress GetModuleHandleA GetCurrentThreadId GetSystemInfo GetSystemTimePreciseAsFileTime RtlCaptureContext FindNextFileW InitializeSListHead SetUnhandledExceptionFilter GetSystemTimeAsFileTime QueryPerformanceCounter IsProcessorFeaturePresent GetConsoleMode SetConsoleMode GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle GetFileInformationByHandleEx GetModuleHandleW SetHandleInformation PostQueuedCompletionStatus CreateIoCompletionPort SetFileCompletionNotificationModes GetQueuedCompletionStatusEx GetProcessHeap HeapFree HeapReAlloc lstrlenW WaitForSingleObjectEx LoadLibraryA GetCurrentProcess GetCurrentProcessId CreateMutexA ReleaseMutex WideCharToMultiByte SetFilePointerEx GetLastError SetFileInformationByHandle WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW CreateDirectoryW GetFinalPathNameByHandleW SwitchToThread CreateFileW SetFileTime GetFileInformationByHandle FindFirstFileExW FindClose GetFileType FormatMessageW GetFullPathNameW GetModuleFileNameW ExitProcess QueryPerformanceFrequency HeapAlloc ReadConsoleW MultiByteToWideChar WriteConsoleW GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer CreateThread

shell32

SHGetKnownFolderPath

combase

CoTaskMemFree

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

advapi32

SystemFunction036 RegCloseKey RegQueryValueExW RegOpenKeyExW

ws2_32

bind WSASocketW WSAIoctl connect ioctlsocket setsockopt getsockopt getsockname send WSASend recv WSAGetLastError getaddrinfo freeaddrinfo WSAStartup WSACleanup shutdown closesocket getpeername

secur32

AcquireCredentialsHandleA InitializeSecurityContextW DeleteSecurityContext AcceptSecurityContext QueryContextAttributesW DecryptMessage ApplyControlToken EncryptMessage FreeContextBuffer FreeCredentialsHandle

crypt32

CertAddCertificateContextToStore CertOpenStore CertDuplicateCertificateContext CertEnumCertificatesInStore CertDuplicateStore CertFreeCertificateContext CertVerifyCertificateChainPolicy CertGetCertificateChain CertFreeCertificateChain CertCloseStore CertDuplicateCertificateChain

ntdll

NtCreateFile NtDeviceIoControlFile NtReadFile RtlNtStatusToDosError NtWriteFile NtCancelIoFileEx

bcrypt

BCryptGenRandom

userenv

GetUserProfileDirectoryW

vcruntime140

_except_handler4_common memcmp __current_exception_context __current_exception memmove memset __CxxFrameHandler3 _CxxThrowException memcpy

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-math-l1-1-0

trunc log2 pow ceil __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _get_initial_narrow_environment _initterm _initterm_e _set_app_type exit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe _initialize_narrow_environment _initialize_onexit_table terminate _register_onexit_function _controlfp_s _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_a057118919ea4a2a98698a893be357da_akira_elex_glassworm

kernel32

shell32

combase

api-ms-win-core-synch-l1-2-0

bcryptprimitives

advapi32

ws2_32

secur32

crypt32

ntdll

bcrypt

userenv

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic