2026-10-22_3615bb17b8e0f6a0a5f2b1c46f712892_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_3615bb17b8e0f6a0a5f2b1c46f712892_akira_glassworm_rusty-stealer
Size 1.9MB
Sample261024-vcwaravzc1
SHA256 1addf64198e46da8d1f162c98ba82d90c7f21f89e30f0df05327316c1a54b89d
MD5 3615bb17b8e0f6a0a5f2b1c46f712892
SHA1 c0b12e8891108e288b2e641cf8c017070e1aab19
SHA512 45453f1519c2651bbf8110f08224d1c752d86d8f13a0eaf0d75ab27e23a5ce6535ffb4357448c196ae1f98428f465a466f3277d6534060cd458497b743f4ab44
SSDEEP 24576:pWqfjuIvH6qgdlRtYoG/wQtlxJYEE3ZwxTrDJyGX3ukE3t0p8JkS4Y:fSIv0ftYoG/wQtH5JxnDog31E3Cp8z
TLSH
T12095C6166668A5E9C1B7C078C2838F65792170DA0B392FF744C182BA2F25EFD6D3D718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_3615bb17b8e0f6a0a5f2b1c46f712892_akira_glassworm_rusty-stealer

File Explorer

2026-10-22_3615bb17b8e0f6a0a5f2b1c46f712892_akira_glassworm_rusty-stealer

.exe 1.9MB

2026-10-22_3615bb17b8e0f6a0a5f2b1c46f712892_akira_glassworm_rusty-stealer

IMPHASH 48cac273c39178141535e0501f9ff026
SHA256 1addf64198e46da8d1f162c98ba82d90c7f21f89e30f0df05327316c1a54b89d
MD5 3615bb17b8e0f6a0a5f2b1c46f712892
SHA1 c0b12e8891108e288b2e641cf8c017070e1aab19
SHA512 45453f1519c2651bbf8110f08224d1c752d86d8f13a0eaf0d75ab27e23a5ce6535ffb4357448c196ae1f98428f465a466f3277d6534060cd458497b743f4ab44
SSDEEP 24576:pWqfjuIvH6qgdlRtYoG/wQtlxJYEE3ZwxTrDJyGX3ukE3t0p8JkS4Y:fSIv0ftYoG/wQtH5JxnDog31E3Cp8z
TLSH
T12095C6166668A5E9C1B7C078C2838F65792170DA0B392FF744C182BA2F25EFD6D3D718
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1422992

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

build_script_main-522974d4427604ff.pdb

kernel32

GetFullPathNameW GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetShortPathNameW WaitForMultipleObjects PeekNamedPipe OpenSemaphoreA CloseHandle WaitForSingleObject ReleaseSemaphore SetEvent CreateEventA GetProcAddress LoadLibraryA GetNativeSystemInfo CompareStringOrdinal GetLastError FreeEnvironmentStringsW WriteFileEx SleepEx SetLastError GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx ReadFile GetOverlappedResult FlushFileBuffers GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW UnhandledExceptionFilter GetExitCodeProcess TerminateProcess GetEnvironmentStringsW GetStdHandle CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW SetFileAttributesW CopyFileExW FindFirstFileExW FindClose CreateHardLinkW ExitProcess GetSystemInfo SwitchToThread WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex GetFinalPathNameByHandleW DeleteFileW SetEnvironmentVariableW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep GetFileAttributesW IsProcessorFeaturePresent FormatMessageW GetModuleHandleA GetTempPathW FindNextFileW SetUnhandledExceptionFilter CreateProcessW GetModuleHandleW

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

advapi32

RegQueryValueExW RegEnumKeyExW RegCloseKey RegOpenKeyExW

ole32

CoInitializeEx CoCreateInstance

oleaut32

SysFreeString SysStringLen

ntdll

NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError NtOpenFile NtWriteFile

vcruntime140

__current_exception __current_exception_context memset memcmp memmove memcpy __CxxFrameHandler3 __C_specific_handler _CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_set_app_type _crt_atexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _register_onexit_function __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe terminate _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_3615bb17b8e0f6a0a5f2b1c46f712892_akira_glassworm_rusty-stealer

kernel32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

advapi32

ole32

oleaut32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic