2026-10-30_8c490a8e45813c01526eb68be20b8466_akira_glassworm_icedid_luca-stealer_njrat_quasar-rat_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-30_8c490a8e45813c01526eb68be20b8466_akira_glassworm_icedid_luca-stealer_njrat_quasar-rat_rusty-stealer
Size 11.5MB
Sample261030-2j6tdsff79
SHA256 0ca54bbe2abc183e71c864b80b9f6baebf93dc240ebae4fddf336bd74194d603
MD5 8c490a8e45813c01526eb68be20b8466
SHA1 a38676eecab0af9782b2f27ce1d88a17b8af8399
SHA512 ac29b67525a132f1b1eedcd32f1ea2bf6ea9d739a5211bdde00e92a4781f7716baf48d1bf23da54328d8626b7cc5082437e544cd050d8a45272db5688726ad02
SSDEEP 98304:iUy7rLVSPJd804QZxTqU4M9/l+3ioAAgiG+JdwP6+v+I+BSC/SZMP37uk:iz+TW597wX+BS0P6k
TLSH
T1DEC62912BB5A55ECC16AC474838746326A3170CB0B35BAFF85C4923A2F66AF46F3D354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-30_8c490a8e45813c01526eb68be20b8466_akira_glassworm_icedid_luca-stealer_njrat_quasar-rat_rusty-stealer

File Explorer

2026-10-30_8c490a8e45813c01526eb68be20b8466_akira_glassworm_icedid_luca-stealer_njrat_quasar-rat_rusty-stealer

.exe 11.5MB

2026-10-30_8c490a8e45813c01526eb68be20b8466_akira_glassworm_icedid_luca-stealer_njrat_quasar-rat_rusty-stealer

IMPHASH 1a763c05e50c20c33e8666e0c8510c67
SHA256 0ca54bbe2abc183e71c864b80b9f6baebf93dc240ebae4fddf336bd74194d603
MD5 8c490a8e45813c01526eb68be20b8466
SHA1 a38676eecab0af9782b2f27ce1d88a17b8af8399
SHA512 ac29b67525a132f1b1eedcd32f1ea2bf6ea9d739a5211bdde00e92a4781f7716baf48d1bf23da54328d8626b7cc5082437e544cd050d8a45272db5688726ad02
SSDEEP 98304:iUy7rLVSPJd804QZxTqU4M9/l+3ioAAgiG+JdwP6+v+I+BSC/SZMP37uk:iz+TW597wX+BS0P6k
TLSH
T1DEC62912BB5A55ECC16AC474838746326A3170CB0B35BAFF85C4923A2F66AF46F3D354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11943936

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FlsFree HeapSize EncodePointer SetStdHandle IsProcessorFeaturePresent GetStdHandle GetConsoleScreenBufferInfo FillConsoleOutputCharacterA FillConsoleOutputAttribute SetConsoleCursorPosition GetConsoleMode GetFileInformationByHandleEx SetConsoleMode FindNextFileW TerminateProcess SetNamedPipeHandleState CreateFileW Sleep RtlPcToFileHeader WriteFileEx GetModuleHandleA TlsFree PeekNamedPipe VirtualProtect SystemTimeToTzSpecificLocalTime CreateMutexA LoadLibraryA RtlLookupFunctionEntry RtlCaptureContext ReleaseMutex WideCharToMultiByte GetCurrentProcessId WaitForSingleObjectEx CreateProcessW GetWindowsDirectoryW CompareStringOrdinal lstrlenW RaiseException CompareStringW GetCurrentProcess RtlVirtualUnwind LCMapStringW GetComputerNameExW InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitOnceExecuteOnce TlsAlloc TlsGetValue TlsSetValue CreateThread SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW ReadConsoleW SleepEx ReadFileEx HeapAlloc GetModuleHandleW SetEnvironmentVariableW VirtualQuery HeapFree GetNativeSystemInfo FindFirstFileExW FlsSetValue GetProcessHeap GetFileInformationByHandle SetConsoleTextAttribute GetSystemTimeAsFileTime IsValidCodePage WaitForSingleObject GetExitCodeProcess ReadFile GetEnvironmentVariableW GetCurrentThread DeleteFileW GetACP GetOEMCP ExitProcess GetCPInfo GetDriveTypeW GetCommandLineW GetStartupInfoW SwitchToThread GetStringTypeW GetFileAttributesW GetCurrentThreadId GetSystemDirectoryW GetCurrentDirectoryW GetEnvironmentStringsW FreeEnvironmentStringsW SetThreadStackGuarantee GetSystemTimePreciseAsFileTime AddVectoredExceptionHandler FindClose SetFilePointerEx SetEndOfFile WriteFile GetFileSizeEx GetFullPathNameW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeSListHead FlsGetValue GetFileType MoveFileExW DuplicateHandle FlushFileBuffers SetFileInformationByHandle HeapReAlloc QueryPerformanceFrequency QueryPerformanceCounter FileTimeToSystemTime RtlUnwindEx EnterCriticalSection GetCommandLineA SetLastError LeaveCriticalSection GetOverlappedResult PostQueuedCompletionStatus CancelIoEx CreateIoCompletionPort DeleteCriticalSection GetQueuedCompletionStatusEx InitializeCriticalSectionAndSpinCount GetTimeZoneInformation CloseHandle InitializeCriticalSectionEx GetModuleFileNameW FlsAlloc FreeLibrary GetModuleHandleExW GetProcAddress GetLastError FormatMessageW GetSystemInfo LoadLibraryExA MultiByteToWideChar OutputDebugStringW IsDebuggerPresent FormatMessageA LoadLibraryExW

oleaut32

SysFreeString SysStringLen GetErrorInfo

advapi32

SystemFunction036 RegQueryValueExW RegOpenKeyExW RegCloseKey

combase

CoTaskMemFree

bcryptprimitives

ProcessPrng

ntdll

NtCreateNamedPipeFile NtOpenFile NtWriteFile RtlNtStatusToDosError NtDeviceIoControlFile NtCancelIoFileEx NtReadFile

shlwapi

AssocQueryStringW

iphlpapi

GetAdaptersAddresses ConvertInterfaceLuidToGuid

user32

GetSystemMetrics

ws2_32

closesocket recv send ioctlsocket getsockopt freeaddrinfo socket getaddrinfo

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

psapi

EnumProcessModules GetModuleFileNameExW GetModuleInformation

bcrypt

BCryptGenRandom

shell32

SHGetKnownFolderPath

Name

.text

Size

7.8MB

Virtual Size

7.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

296KB

Virtual Size

314KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

354KB

Virtual Size

354KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

89KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rcd7cb

Size

132KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-30_8c490a8e45813c01526eb68be20b8466_akira_glassworm_icedid_luca-stealer_njrat_quasar-rat_rusty-stealer

kernel32

oleaut32

advapi32

combase

bcryptprimitives

ntdll

shlwapi

iphlpapi

user32

ws2_32

api-ms-win-core-synch-l1-2-0

psapi

bcrypt

shell32

generic