2026-10-25_7454306624970f38aef2e2aae202802e_akira_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_7454306624970f38aef2e2aae202802e_akira_elex_glassworm
Size 472KB
Sample261026-3xc9nsxt2n
SHA256 fe1453d4b24c34066be75029d96f5e781b15d125370432e7b4e7c61154da1360
MD5 7454306624970f38aef2e2aae202802e
SHA1 fdd893f8b717487b74a010c8c779bb8b662bb2d3
SHA512 50527e41b1397fa582bac63f3da8fe44e92be8b9f190cf92415dd8cee8f2cac953d0cc6b766f6f3ec07ee8178881bed5d7f7b35f021caed5a09c4b094abcd545
SSDEEP 6144:o2Rb7L3KBtRBWLS4pTUYGMD7OB3soHjdNKAe1pAI+OlZJ1mky1CwhtJFkSPsam2/:FUUzqcoHjd8AI+GokUbJBT/
TLSH
T1EAA47C01B66980AADE0F8177195EF37EE9374C850B119ED3E7D48C706DA67E0683A13B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-10-25_7454306624970f38aef2e2aae202802e_akira_elex_glassworm

.exe 472KB

2026-10-25_7454306624970f38aef2e2aae202802e_akira_elex_glassworm

IMPHASH 7d1d16430e6ad9c41af82540a78ad280
SHA256 fe1453d4b24c34066be75029d96f5e781b15d125370432e7b4e7c61154da1360
MD5 7454306624970f38aef2e2aae202802e
SHA1 fdd893f8b717487b74a010c8c779bb8b662bb2d3
SHA512 50527e41b1397fa582bac63f3da8fe44e92be8b9f190cf92415dd8cee8f2cac953d0cc6b766f6f3ec07ee8178881bed5d7f7b35f021caed5a09c4b094abcd545
SSDEEP 6144:o2Rb7L3KBtRBWLS4pTUYGMD7OB3soHjdNKAe1pAI+OlZJ1mky1CwhtJFkSPsam2/:FUUzqcoHjd8AI+GokUbJBT/
TLSH
T1EAA47C01B66980AADE0F8177195EF37EE9374C850B119ED3E7D48C706DA67E0683A13B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

1e:5b:31:24:eb:14:3f:ca:ab:2a:f8:3c:d8:df:78:bb:8d:f2:c0:e0:1b:df:ae:19:75:b6:03:e2:39:83:63:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 22, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1d:4d:19:c8:4e:d7:0f:57:48:00:00:00:00:02:1d

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1f:3a:70:69:e4:a2:30:2e:95:00:01:00:00:02:1f

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Feb 19, 2026 - May 17, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

Major OS version

Entry point

328640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

inno_updater.pdb

kernel32

FormatMessageW OpenProcess QueryFullProcessImageNameW InitializeSListHead TerminateProcess GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime Process32NextW GetModuleFileNameW GetCommandLineW GetCurrentThread GetCurrentThreadId SetThreadStackGuarantee AddVectoredExceptionHandler GetCurrentDirectoryW GetCurrentProcess RtlCaptureContext GetProcAddress ReleaseMutex WaitForSingleObjectEx LoadLibraryA lstrlenW GetCurrentProcessId CreateMutexA WideCharToMultiByte MultiByteToWideChar Process32FirstW GetModuleHandleA CreateThread ExitProcess QueryPerformanceCounter QueryPerformanceFrequency HeapAlloc HeapReAlloc WaitForSingleObject SetWaitableTimer Sleep CreateWaitableTimerExW SwitchToThread IsDebuggerPresent GetModuleHandleW HeapFree GetProcessHeap UnhandledExceptionFilter MoveFileExW GetFileInformationByHandle FindFirstFileExW FindNextFileW GetFullPathNameW GetTempPathW WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle SetUnhandledExceptionFilter GetEnvironmentVariableW SetFileInformationByHandle GetFileInformationByHandleEx FindClose SetLastError GetLastError CreateFileW CloseHandle CreateToolhelp32Snapshot GetTimeZoneInformationForYear IsProcessorFeaturePresent

ntdll

RtlNtStatusToDosError NtOpenFile NtWriteFile

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

user32

GetWindowRect SendDlgItemMessageW ShutdownBlockReasonDestroy SetWindowPos EndDialog ShutdownBlockReasonCreate SendMessageW PostThreadMessageW DialogBoxParamW GetDesktopWindow MessageBoxW SetDlgItemTextW

vcruntime140

_except_handler4_common __current_exception_context memmove memcpy memset memcmp __CxxFrameHandler3 __current_exception

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc __p___argv _configure_narrow_argv _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe _register_onexit_function _crt_atexit _controlfp_s _initialize_onexit_table _cexit _set_app_type terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_7454306624970f38aef2e2aae202802e_akira_elex_glassworm

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

user32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic