2026-10-22_ff830e55d72e5e1415684be28ab40359_akira_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_ff830e55d72e5e1415684be28ab40359_akira_elex_glassworm
Size 357KB
Sample261022-3rf4daax9p
SHA256 4d6a834c1bb8cb19304bdefe9bb11c694836b109af7d51de48a5b1d173801dd3
MD5 ff830e55d72e5e1415684be28ab40359
SHA1 6324bc8e240c9e97a6c30c3e87afb356dd93bc72
SHA512 49d4a9187b54a702bf35ec2a9c37c2b0db22314f4e2fe9522099eb70007c3d0d2fb81e540e7d3d60d4decd72644c70736b9ebf5235e81c9e66f11af0abfe816c
SSDEEP 6144:oO48RmGUP6NADVhreQf1+r8LPoB5rTESJf8Zr:68MGHkVhpMr82rTPf
TLSH
T14D746C09FA43A1B9C5776172009FF37BE2305A0E40269E2BDFD91E65F76F700592A31A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_ff830e55d72e5e1415684be28ab40359_akira_elex_glassworm

File Explorer

2026-10-22_ff830e55d72e5e1415684be28ab40359_akira_elex_glassworm

.exe 357KB

2026-10-22_ff830e55d72e5e1415684be28ab40359_akira_elex_glassworm

IMPHASH ae7299ba36a672ad466e5108a53902de
SHA256 4d6a834c1bb8cb19304bdefe9bb11c694836b109af7d51de48a5b1d173801dd3
MD5 ff830e55d72e5e1415684be28ab40359
SHA1 6324bc8e240c9e97a6c30c3e87afb356dd93bc72
SHA512 49d4a9187b54a702bf35ec2a9c37c2b0db22314f4e2fe9522099eb70007c3d0d2fb81e540e7d3d60d4decd72644c70736b9ebf5235e81c9e66f11af0abfe816c
SSDEEP 6144:oO48RmGUP6NADVhreQf1+r8LPoB5rTESJf8Zr:68MGHkVhpMr82rTPf
TLSH
T14D746C09FA43A1B9C5776172009FF37BE2305A0E40269E2BDFD91E65F76F700592A31A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4318

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CreateEventA CreateSemaphoreA DeleteCriticalSection EnterCriticalSection GetCurrentThreadId GetHandleInformation GetProcessAffinityMask GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount InitializeCriticalSection LeaveCriticalSection OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseSemaphore RemoveVectoredExceptionHandler ResetEvent ResumeThread SetEvent SetProcessAffinityMask SetThreadContext SetThreadPriority SuspendThread TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects AddVectoredExceptionHandler CloseHandle CreateFileMappingA CreateFileW CreateMutexA CreateMutexW CreateToolhelp32Snapshot CreateWaitableTimerExW DuplicateHandle ExitProcess FormatMessageW FreeLibrary GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetEnvironmentVariableW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete IsDebuggerPresent LoadLibraryA MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar ReleaseMutex RtlCaptureContext SetFileInformationByHandle SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile WaitForSingleObject WaitForSingleObjectEx WriteConsoleW lstrlenW EnumSystemLocalesEx FreeConsole GetLastError VirtualAlloc VirtualProtect

msvcrt

__getmainargs __initenv __lconv_init __p__acmdln __p__commode __p__fmode __set_app_type __setusermatherr _amsg_exit _beginthreadex _cexit _commode _endthreadex _errno _fmode _fpreset _initterm _iob _onexit _setjmp3 _strdup _ultoa _vsnprintf _vsnwprintf abort calloc exit fgetwc fprintf free fwrite getc longjmp malloc memcmp memcpy memmove memset printf realloc signal strlen strncmp vfprintf

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

d3d9

Direct3DCreate9

oleaut32

GetErrorInfo

Name

.text

Size

288KB

Virtual Size

287KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

532B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

60B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_ff830e55d72e5e1415684be28ab40359_akira_elex_glassworm

kernel32

msvcrt

ntdll

api-ms-win-core-synch-l1-2-0

d3d9

oleaut32

generic