2026-10-29_0c2766ffb37ef5328ebc962bc70d480c_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-29_0c2766ffb37ef5328ebc962bc70d480c_akira_glassworm_rusty-stealer
Size 966KB
Sample261029-v2zdpsbg89
SHA256 3fd3d18ca8d3deb896c00862c45f383bc099460840c6681e8f5a970f2288d9ef
MD5 0c2766ffb37ef5328ebc962bc70d480c
SHA1 6185029a7e480a3b3ac7e6b596f6089772b0c1c5
SHA512 e6131a1bc83e675b3e853c34ae0022555c74f07c5175debcd3a9238ea8c684171ee90a0e1715f220fc4d518984f88ded0c0ba6818817d5eb16e9c62208afc672
SSDEEP 12288:rrK9eoa9E6aCzSb7oVcn6EGmCZOT+MfSFGBcsWNvJ6mXH7MamwwRoB:rrUPEzSb7acBGmCZOyMfSNdP6y7sw1
TLSH
T128251725BA5A68ADC55AC87083468A735A3170CF1B35B9FF04D991783FA9AF41F3C318
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-29_0c2766ffb37ef5328ebc962bc70d480c_akira_glassworm_rusty-stealer

File Explorer

2026-10-29_0c2766ffb37ef5328ebc962bc70d480c_akira_glassworm_rusty-stealer

.exe 966KB

2026-10-29_0c2766ffb37ef5328ebc962bc70d480c_akira_glassworm_rusty-stealer

IMPHASH f64429b765dc6c108f8879c5483f9228
SHA256 3fd3d18ca8d3deb896c00862c45f383bc099460840c6681e8f5a970f2288d9ef
MD5 0c2766ffb37ef5328ebc962bc70d480c
SHA1 6185029a7e480a3b3ac7e6b596f6089772b0c1c5
SHA512 e6131a1bc83e675b3e853c34ae0022555c74f07c5175debcd3a9238ea8c684171ee90a0e1715f220fc4d518984f88ded0c0ba6818817d5eb16e9c62208afc672
SSDEEP 12288:rrK9eoa9E6aCzSb7oVcn6EGmCZOT+MfSFGBcsWNvJ6mXH7MamwwRoB:rrUPEzSb7acBGmCZOyMfSNdP6y7sw1
TLSH
T128251725BA5A68ADC55AC87083468A735A3170CF1B35B9FF04D991783FA9AF41F3C318
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

710000

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

style_compile-f3bc8a86fc94b573.pdb

kernel32

CloseHandle ReadFile GetLastError GetModuleHandleW GetProcAddress GetProcessHeap HeapAlloc HeapFree MultiByteToWideChar GetCurrentProcessId FormatMessageW WideCharToMultiByte GetSystemTimeAsFileTime IsDebuggerPresent IsProcessorFeaturePresent GetPrivateProfileStringA GetPrivateProfileSectionNamesA SetUnhandledExceptionFilter SetFileInformationByHandle GetCurrentThreadId GetFullPathNameW SetLastError SleepEx UnhandledExceptionFilter InitializeSListHead WriteFileEx WaitForSingleObject FreeEnvironmentStringsW CompareStringOrdinal GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle SetFileTime HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter CreateThread CreateEventW ReadFileEx GetOverlappedResult GetCurrentProcess DuplicateHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandle GetFileInformationByHandleEx GetEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW FindFirstFileExW FindClose ExitProcess GetSystemInfo SwitchToThread WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex DeleteFileW CreateFileW GetModuleFileNameW WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetFileType WaitForMultipleObjects GetModuleHandleA GetTempPathW FindNextFileW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

ntdll

NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError NtWriteFile NtOpenFile

userenv

GetUserProfileDirectoryW

vcruntime140

__current_exception memcmp memmove memset __CxxFrameHandler3 __C_specific_handler __current_exception_context memcpy _CxxThrowException

api-ms-win-crt-math-l1-1-0

floor round __setusermatherr pow fmod

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _exit exit _initterm_e __p___argc _initterm _get_initial_narrow_environment __p___argv _initialize_narrow_environment _configure_narrow_argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type _register_onexit_function _initialize_onexit_table terminate

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-29_0c2766ffb37ef5328ebc962bc70d480c_akira_glassworm_rusty-stealer

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

ntdll

userenv

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic