2026-10-22_236fbb4a3cad99e55522c28bcd45ac9e_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_236fbb4a3cad99e55522c28bcd45ac9e_akira_glassworm_rusty-stealer
Size 8.9MB
Sample261024-xsflca1t7m
SHA256 5f894bd807ad91539af0c417bd8409c38fa540c9da57e7961ce30987c8eebef0
MD5 236fbb4a3cad99e55522c28bcd45ac9e
SHA1 85097826b97da7bbb5ec953e4125cdc906b9871c
SHA512 a25ef7d0eea842ea5d1346572e911c25d76a8b0f88c170966676cd5e815deb423b309265dd9193a1d770a31702be97d65414fc6cf2c4807283270373c030f616
SSDEEP 98304:5k4t/GM6kpj1zmuR0zV+aSp0VxfzVnSgP6ckQM9EbESC+O7:AOp6w9ZJ
TLSH
T156964B12BA9B99ECD15AC8B0834646731E2174CB0B36B9FF41C845393F6ABE05F39719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_236fbb4a3cad99e55522c28bcd45ac9e_akira_glassworm_rusty-stealer

File Explorer

2026-10-22_236fbb4a3cad99e55522c28bcd45ac9e_akira_glassworm_rusty-stealer

.exe 8.9MB

2026-10-22_236fbb4a3cad99e55522c28bcd45ac9e_akira_glassworm_rusty-stealer

IMPHASH 99bb3908e8c4a6454c0c93b683d995e9
SHA256 5f894bd807ad91539af0c417bd8409c38fa540c9da57e7961ce30987c8eebef0
MD5 236fbb4a3cad99e55522c28bcd45ac9e
SHA1 85097826b97da7bbb5ec953e4125cdc906b9871c
SHA512 a25ef7d0eea842ea5d1346572e911c25d76a8b0f88c170966676cd5e815deb423b309265dd9193a1d770a31702be97d65414fc6cf2c4807283270373c030f616
SSDEEP 98304:5k4t/GM6kpj1zmuR0zV+aSp0VxfzVnSgP6ckQM9EbESC+O7:AOp6w9ZJ
TLSH
T156964B12BA9B99ECD15AC8B0834646731E2174CB0B36B9FF41C845393F6ABE05F39719
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5489736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

selaris_capture.pdb

bcryptprimitives

ProcessPrng

kernel32

DeleteFileW GetFileInformationByHandleEx SetFileTime GetFinalPathNameByHandleW RemoveDirectoryW GetFullPathNameW GetTempPathW HeapAlloc GetFileAttributesW DuplicateHandle SetLastError FindFirstFileExW FindNextFileW Sleep GetModuleHandleA SetHandleInformation SetFileInformationByHandle GetFileInformationByHandle LocalFree FreeLibrary LoadLibraryExW SetFilePointerEx MoveFileExW FlushFileBuffers SetThreadErrorMode GetProcAddress GlobalLock FindClose GetModuleFileNameW CloseHandle GetProcessHeap HeapFree HeapReAlloc GlobalSize GlobalFree GlobalUnlock GlobalAlloc GetLastError InitializeSListHead IsDebuggerPresent GetSystemTimeAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW CompareStringOrdinal ReadFileEx SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP GetConsoleMode GetStdHandle WriteConsoleW ReadConsoleW QueryPerformanceFrequency ExitProcess GetModuleHandleW UnhandledExceptionFilter CreateFileW CreateDirectoryW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW SetThreadStackGuarantee AddVectoredExceptionHandler ReleaseMutex CreateMutexA GetCurrentProcessId LoadLibraryA WaitForSingleObjectEx GetCurrentProcess lstrlenW SleepEx WriteFileEx Process32NextW QueryFullProcessImageNameW OpenProcess Process32FirstW CreateToolhelp32Snapshot GetExitCodeProcess WaitForSingleObject SetEvent GetProcessId CreateEventW LockFileEx FreeEnvironmentStringsW GetEnvironmentStringsW CreateThread GetSystemTimePreciseAsFileTime SetUnhandledExceptionFilter CreateHardLinkW IsProcessorFeaturePresent GetSystemInfo LoadLibraryW FormatMessageW GetCurrentThreadId QueryPerformanceCounter SwitchToThread WideCharToMultiByte MultiByteToWideChar GetCurrentThread

user32

OpenClipboard GetClipboardData SetClipboardData EmptyClipboard RegisterClipboardFormatW IsClipboardFormatAvailable CloseClipboard GetForegroundWindow MapVirtualKeyW SendInput SetForegroundWindow GetDC GetClassNameW GetClassInfoExW DefWindowProcW RegisterClassExW CreateWindowExW DestroyIcon DestroyCursor RegisterWindowMessageA GetKeyState RegisterTouchWindow GetKeyboardState GetAsyncKeyState IsProcessDPIAware SetWindowDisplayAffinity ChangeDisplaySettingsExW GetMenu ScreenToClient SetWindowPlacement ReleaseCapture SetCapture TrackMouseEvent GetTouchInputInfo CloseTouchInputHandle GetCursorPos GetRawInputData ValidateRect GetClipCursor ClipCursor ShowCursor ShowWindow GetSystemMenu EnableMenuItem SetWindowLongW GetWindowLongW AdjustWindowRectEx ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW GetWindowTextLengthW GetWindowTextW CreateIcon MonitorFromRect GetWindowPlacement MsgWaitForMultipleObjectsEx DestroyWindow PostMessageW ReleaseDC EnumDisplayMonitors PeekMessageW TranslateMessage DispatchMessageW SetWindowPos InvalidateRgn GetWindowLongPtrW GetClientRect IsIconic GetMonitorInfoW MonitorFromPoint GetActiveWindow GetSystemMetrics SendMessageW SystemParametersInfoA SetWindowLongPtrW RegisterRawInputDevices RedrawWindow CreateIconFromResourceEx GetWindowRect MonitorFromWindow FlashWindowEx SetWindowTextW ClientToScreen SetCursorPos LoadCursorW SetCursor

ntdll

RtlNtStatusToDosError NtCreateNamedPipeFile NtReadFile NtOpenFile NtWriteFile

shlwapi

AssocQueryStringW

ole32

OleInitialize CoCreateInstance CoTaskMemFree CoInitializeEx CoUninitialize RegisterDragDrop RevokeDragDrop

shell32

DragQueryFileW DragFinish SHCreateItemFromParsingName

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcrypt

BCryptGenRandom

advapi32

RevertToSelf ImpersonateAnonymousToken SystemFunction036

opengl32

wglCreateContext wglGetCurrentDC wglMakeCurrent wglGetCurrentContext wglGetProcAddress wglDeleteContext wglShareLists

gdi32

GetDeviceCaps ChoosePixelFormat DescribePixelFormat SetPixelFormat DeleteObject SwapBuffers CreateRectRgn

imm32

ImmGetCompositionStringW ImmSetCandidateWindow ImmSetCompositionWindow ImmAssociateContextEx ImmGetContext ImmReleaseContext

crypt32

CryptUnprotectData CryptProtectData

ws2_32

WSACleanup getaddrinfo WSARecv select send freeaddrinfo getsockname getpeername WSASocketW WSAStartup WSADuplicateSocketW connect getsockopt recv ioctlsocket setsockopt closesocket WSAGetLastError WSASend

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow

uxtheme

SetWindowTheme

vcruntime140

__current_exception_context memcpy memset __current_exception __C_specific_handler _CxxThrowException __CxxFrameHandler3 memmove memcmp

api-ms-win-crt-math-l1-1-0

ceilf roundf _hypotf atan2f powf expf sinf cosf fmod sin floorf cos round exp2f acosf __setusermatherr cbrtf floor trunc

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

strerror _set_app_type _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm exit _exit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _register_onexit_function _crt_atexit terminate _seh_filter_exe _initterm_e

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_236fbb4a3cad99e55522c28bcd45ac9e_akira_glassworm_rusty-stealer

bcryptprimitives

kernel32

user32

ntdll

shlwapi

ole32

shell32

api-ms-win-core-synch-l1-2-0

bcrypt

advapi32

opengl32

gdi32

imm32

crypt32

ws2_32

dwmapi

uxtheme

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic