2026-10-25_7258ae0dc7d11edcdd370448547f379e_akira_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_7258ae0dc7d11edcdd370448547f379e_akira_glassworm
Size 4.9MB
Sample261027-afc85axt7j
SHA256 7665d952613d2a14c71453e9918cbd79b61a5f825854ded437a33448e1046456
MD5 7258ae0dc7d11edcdd370448547f379e
SHA1 0332f4dbef4c42c70446b24f5a9f7c720c5ce543
SHA512 a9fb15d0ec85c72c9c8e8e921500188054fa3737672789fe1f511f13fe1a9bd6180ea5eba54d74a2541aeda6a58ee9d22fcd322ef093bb70c5fe7dc135a3b37f
SSDEEP 49152:1PJFlUJZq68qLeMtNj67LPsdcM9LraWFsSECwspAUNtmbHywXx9wlUuq8Pv0K2k9:k/4q17D
TLSH
T12D36D72BA77960D9C0BFC07892839B22BD6134D9473977E7858092691F64EF8BD3C364
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_7258ae0dc7d11edcdd370448547f379e_akira_glassworm

File Explorer

2026-10-25_7258ae0dc7d11edcdd370448547f379e_akira_glassworm

.exe 4.9MB

2026-10-25_7258ae0dc7d11edcdd370448547f379e_akira_glassworm

IMPHASH 717f150f2c1309823eada94e57ec5bc3
SHA256 7665d952613d2a14c71453e9918cbd79b61a5f825854ded437a33448e1046456
MD5 7258ae0dc7d11edcdd370448547f379e
SHA1 0332f4dbef4c42c70446b24f5a9f7c720c5ce543
SHA512 a9fb15d0ec85c72c9c8e8e921500188054fa3737672789fe1f511f13fe1a9bd6180ea5eba54d74a2541aeda6a58ee9d22fcd322ef093bb70c5fe7dc135a3b37f
SSDEEP 49152:1PJFlUJZq68qLeMtNj67LPsdcM9LraWFsSECwspAUNtmbHywXx9wlUuq8Pv0K2k9:k/4q17D
TLSH
T12D36D72BA77960D9C0BFC07892839B22BD6134D9473977E7858092691F64EF8BD3C364
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3910400

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\amgryn\dsh workspace\xiaomaorou\rust\xmr-process-host\target\debug\deps\e2e-a65dd88564338c0e.pdb

kernel32

CreateNamedPipeW CreateJobObjectW SetInformationJobObject OpenProcess AssignProcessToJobObject GetExitCodeProcess AcquireSRWLockShared ReleaseSRWLockShared GetConsoleMode GetLastError SleepConditionVariableSRW SetLastError TerminateProcess GetCurrentProcess DuplicateHandle TryAcquireSRWLockExclusive WaitForSingleObject GetProcessId CreateProcessW InitializeProcThreadAttributeList UpdateProcThreadAttribute DeleteProcThreadAttributeList ExpandEnvironmentStringsW ReadFile WriteFile FlushFileBuffers FormatMessageW SetErrorMode GetModuleHandleExW LoadLibraryW GetProcAddress FreeLibrary GetFileType GetNamedPipeInfo CreatePipe GetSystemInfo GetCurrentProcessId CreateIoCompletionPort GetQueuedCompletionStatusEx PostQueuedCompletionStatus ConnectNamedPipe GetOverlappedResult CancelIoEx FreeEnvironmentStringsW ReleaseMutex FindClose CompareStringOrdinal AddVectoredExceptionHandler SetThreadStackGuarantee SwitchToThread LocalFree GetCurrentThread RtlCaptureContext RtlLookupFunctionEntry GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetCommandLineW SetFileInformationByHandle SetFilePointerEx CreateDirectoryW WriteFileEx SleepEx ReadFileEx WakeAllConditionVariable WakeConditionVariable QueryPerformanceCounter QueryPerformanceFrequency HeapAlloc GetProcessHeap HeapFree HeapReAlloc WaitForSingleObjectEx LoadLibraryA CreateMutexA GetModuleHandleA FindNextFileW GetFileInformationByHandle GetFileInformationByHandleEx FindFirstFileW MoveFileExW GetFinalPathNameByHandleW CreateEventW CancelIo GetModuleHandleW GetModuleFileNameW ExitProcess GetFullPathNameW WaitForMultipleObjects GetSystemDirectoryW GetWindowsDirectoryW GetFileAttributesW MultiByteToWideChar WriteConsoleW CreateThread TlsGetValue TlsSetValue GetSystemTimeAsFileTime IsDebuggerPresent InitializeSListHead GetCurrentThreadId GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle CloseHandle ReleaseSRWLockExclusive AcquireSRWLockExclusive SetNamedPipeHandleState Sleep CreateFileW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind

bcrypt

BCryptGenRandom

advapi32

SystemFunction036 RegEnumValueW RegCloseKey RegOpenKeyExW ConvertStringSecurityDescriptorToSecurityDescriptorW OpenProcessToken

ntdll

RtlNtStatusToDosError NtDeviceIoControlFile NtCancelIoFileEx

ws2_32

send recv closesocket WSAGetLastError getsockopt

userenv

GetUserProfileDirectoryW

vcruntime140

__C_specific_handler _CxxThrowException memcmp memset memcpy __CxxFrameHandler3 __current_exception_context memmove __current_exception

api-ms-win-crt-math-l1-1-0

floor __setusermatherr pow

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc malloc free

api-ms-win-crt-utility-l1-1-0

_byteswap_ulong _byteswap_uint64 _rotl64 qsort_s

api-ms-win-crt-stdio-l1-1-0

__p__commode __stdio_common_vfprintf fflush _set_fmode __acrt_iob_func

api-ms-win-crt-time-l1-1-0

clock

api-ms-win-crt-runtime-l1-1-0

_cexit _wassert terminate _crt_atexit _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _register_onexit_function __p___argc __p___argv _initialize_onexit_table _c_exit _register_thread_local_exe_atexit_callback

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_7258ae0dc7d11edcdd370448547f379e_akira_glassworm

kernel32

bcrypt

advapi32

ntdll

ws2_32

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic