2026-10-28_8a7a0cf530593ca2a0622500aa0cfd23_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-28_8a7a0cf530593ca2a0622500aa0cfd23_akira_glassworm_rusty-stealer
Size 21.0MB
Sample261030-aferyshs2l
SHA256 effeb54d8ef7fc7b76e1cbd1e295973dbfebc8bac22039eef2c236a49ba8f48b
MD5 8a7a0cf530593ca2a0622500aa0cfd23
SHA1 55177a0bc2b798f031ed565ab66c99972c4df73d
SHA512 c909e078bdc6b0cd800fa2e0aed4ea5f2656ef3c6fb7b3c185ea6549de8695d7beba318494c0bdc42b29ab698fbf2fe7f9ab36a714c1f05609237f4da5405189
SSDEEP 196608:uV2ZJIPrHRYRxKkFM11jcL/UU9Cb+4QR9yUQwWO6rYbw:a2ZJIPrHRYRxKu/UU9BrR9yUQS7
TLSH
T10F270861BA5B996CD09BC47483478A664A3130DB0B35B9FF449496383F6EBF42F38319
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_8a7a0cf530593ca2a0622500aa0cfd23_akira_glassworm_rusty-stealer

File Explorer

2026-10-28_8a7a0cf530593ca2a0622500aa0cfd23_akira_glassworm_rusty-stealer

.exe 21.0MB

2026-10-28_8a7a0cf530593ca2a0622500aa0cfd23_akira_glassworm_rusty-stealer

IMPHASH 7812e5d7391f5ed58db03f2678640225
SHA256 effeb54d8ef7fc7b76e1cbd1e295973dbfebc8bac22039eef2c236a49ba8f48b
MD5 8a7a0cf530593ca2a0622500aa0cfd23
SHA1 55177a0bc2b798f031ed565ab66c99972c4df73d
SHA512 c909e078bdc6b0cd800fa2e0aed4ea5f2656ef3c6fb7b3c185ea6549de8695d7beba318494c0bdc42b29ab698fbf2fe7f9ab36a714c1f05609237f4da5405189
SSDEEP 196608:uV2ZJIPrHRYRxKkFM11jcL/UU9Cb+4QR9yUQwWO6rYbw:a2ZJIPrHRYRxKu/UU9BrR9yUQS7
TLSH
T10F270861BA5B996CD09BC47483478A664A3130DB0B35B9FF449496383F6EBF42F38319
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15241028

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

owaim_corpus.pdb

kernel32

SetNamedPipeHandleState GetUserDefaultUILanguage EncodePointer TlsAlloc LCIDToLocaleName WaitForSingleObject GetProcessTimes GetCurrentProcessId OpenProcess FreeLibrary OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetCurrentThreadId TlsGetValue TlsSetValue GetModuleHandleA CreateFileW SetEvent Sleep GetProcAddress LocalFree QueryFullProcessImageNameW IsDebuggerPresent GetFileAttributesW GetFileInformationByHandle GetConsoleMode FlushFileBuffers GetModuleHandleW IsProcessorFeaturePresent CreateFileMappingW GetSystemTime GetSystemTimeAsFileTime WideCharToMultiByte GetFileSize LockFileEx UnlockFile HeapDestroy HeapCompact GetSystemInfo HeapReAlloc DeleteFileW DeleteFileA WaitForSingleObjectEx CreateFileA FlushViewOfFile GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA MultiByteToWideChar HeapSize HeapValidate UnmapViewOfFile CreateMutexW GetTempPathW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile GetDiskFreeSpaceW WriteFile GetFullPathNameW HeapCreate ReadFile AreFileApisANSI GetCurrentProcess DuplicateHandle UnregisterWaitEx RegisterWaitForSingleObject TlsFree LoadLibraryExW ReleaseSRWLockExclusive RtlPcToFileHeader WakeAllConditionVariable LoadLibraryW FormatMessageW LoadLibraryExA MapViewOfFile SetHandleInformation SleepConditionVariableSRW AcquireSRWLockExclusive CreatePipe GetTickCount GetLastError CreateEventW HeapFree LoadLibraryA HeapAlloc GetProcessHeap lstrlenW SetFileCompletionNotificationModes GetQueuedCompletionStatusEx CreateIoCompletionPort CancelIoEx GetOverlappedResult PostQueuedCompletionStatus CloseHandle

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey RegGetValueW RegCreateKeyExW RegCreateKeyTransactedW RegOpenKeyTransactedW

oleaut32

SysStringLen SetErrorInfo GetErrorInfo SysFreeString

bcryptprimitives

ProcessPrng

ntdll

NtCancelIoFileEx NtCreateNamedPipeFile NtDeviceIoControlFile NtCreateFile NtOpenFile NtWriteFile NtReadFile RtlNtStatusToDosError RtlGetVersion

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

user32

CheckMenuItem GetMenuItemInfoW RemoveMenu CreatePopupMenu CreateMenu SetMenu DrawMenuBar SetMenuItemInfoW AppendMenuW InsertMenuW TrackPopupMenu PostQuitMessage CreateAcceleratorTableW DestroyAcceleratorTable CreateIcon SetWindowTextW GetWindowTextLengthW SendInput SetForegroundWindow GetAsyncKeyState GetKeyboardState DrawIconEx ToUnicodeEx GetKeyState DestroyMenu GetKeyboardLayout GetMenu EnumDisplayMonitors MonitorFromPoint GetRawInputData DestroyIcon SetWindowDisplayAffinity GetMenuBarInfo SetPropW SetWindowLongW EnableMenuItem GetSystemMenu ClipCursor GetClipCursor ShowCursor GetWindowDC DefWindowProcW ReleaseCapture FlashWindowEx TranslateMessage ScreenToClient GetWindowLongW GetClientRect ClientToScreen RegisterRawInputDevices MsgWaitForMultipleObjectsEx RegisterWindowMessageA SetParent MapWindowPoints DrawTextW VkKeyScanW SetFocus ShowWindow ReleaseDC SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn DestroyWindow EnableWindow IsWindowEnabled IsProcessDPIAware GetDC GetMessageW TranslateAcceleratorW DispatchMessageW PostThreadMessageW PostMessageW SystemParametersInfoA GetDpiForSystem GetDpiForWindow GetAwarenessFromDpiAwarenessContext GetWindowDpiAwarenessContext SetThreadDpiAwarenessContext UnhookWinEvent SetWinEventHook GetWindow GetWindowThreadProcessId EnumWindows EqualRect OffsetRect IntersectRect GetWindowRect GetWindowTextW IsWindowVisible GetWindowDisplayAffinity UnregisterHotKey RegisterHotKey RedrawWindow GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos IsIconic EnumChildWindows DispatchMessageA GetMessageA RegisterClassExW PeekMessageW AdjustWindowRect MapVirtualKeyExW SetCapture RegisterTouchWindow IsWindow CreateWindowExW AdjustWindowRectEx LoadCursorW InvalidateRgn SetWindowPos GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW SendMessageW GetUpdateRect MapVirtualKeyW ValidateRect SetCursor CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW FillRect GetSystemMetrics GetMonitorInfoW MonitorFromRect MonitorFromWindow GetCursorPos GetDisplayConfigBufferSizes DisplayConfigGetDeviceInfo QueryDisplayConfig

comctl32

TaskDialogIndirect DefSubclassProc RemoveWindowSubclass SetWindowSubclass

ole32

CoInitializeEx CoCreateInstance CoInitialize CoUninitialize CoTaskMemFree RevokeDragDrop RegisterDragDrop OleInitialize CoTaskMemAlloc CoCreateFreeThreadedMarshaler

gdi32

GetDeviceCaps CombineRgn CreateDIBSection SelectObject CreateSolidBrush DeleteObject BitBlt DeleteDC CreateCompatibleDC CreateRectRgn SetBkMode SetTextColor

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

shlwapi

SHCreateMemStream

shell32

ShellExecuteExW SHCreateItemFromParsingName SHGetKnownFolderPath ShellExecuteW DragQueryFileW DragFinish SHAppBarMessage ord190 ord155 SHOpenFolderAndSelectItems

secur32

EncryptMessage DeleteSecurityContext QueryContextAttributesW FreeContextBuffer ApplyControlToken FreeCredentialsHandle InitializeSecurityContextW AcquireCredentialsHandleA DecryptMessage AcceptSecurityContext

ws2_32

bind WSASocketW shutdown closesocket WSAIoctl getsockopt getpeername getsockname recv WSASend send setsockopt ioctlsocket connect WSAGetLastError getaddrinfo WSACleanup freeaddrinfo WSAStartup

crypt32

CertDuplicateStore CertCloseStore CertEnumCertificatesInStore CertOpenStore CertAddCertificateContextToStore CertDuplicateCertificateChain CertFreeCertificateContext CertFreeCertificateChain CertDuplicateCertificateContext CertVerifyCertificateChainPolicy CertGetCertificateChain

d3d11

CreateDirect3D11DeviceFromDXGIDevice D3D11CreateDevice

dxgi

CreateDXGIFactory1

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer EventRegister EventSetInformation EventUnregister

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentStringsW GetStdHandle FreeEnvironmentStringsW GetEnvironmentVariableW SetEnvironmentVariableW GetCurrentDirectoryW GetCommandLineW

api-ms-win-core-localization-l1-2-0

FormatMessageA

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter SetLastError RaiseException UnhandledExceptionFilter

api-ms-win-core-synch-l1-1-0

SleepEx SetWaitableTimer DeleteCriticalSection TryEnterCriticalSection CreateWaitableTimerExW InitializeCriticalSectionAndSpinCount LeaveCriticalSection CreateMutexA InitializeCriticalSection EnterCriticalSection ReleaseMutex

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-file-l1-1-0

FindClose FindFirstFileExW SetFileInformationByHandle RemoveDirectoryW SetFilePointerEx WriteFileEx CreateDirectoryW GetFinalPathNameByHandleW SetFileTime ReadFileEx FindNextFileW

api-ms-win-core-file-l2-1-0

CopyFileExW MoveFileExW GetFileInformationByHandleEx

api-ms-win-core-processthreads-l1-1-0

SetThreadStackGuarantee GetCurrentThread TerminateProcess ExitProcess SwitchToThread GetProcessId GetExitCodeProcess CreateProcessW CreateThread

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

api-ms-win-core-io-l1-1-1

CancelIo

api-ms-win-core-sysinfo-l1-1-0

GetWindowsDirectoryW GetSystemDirectoryW

api-ms-win-core-errorhandling-l1-1-1

AddVectoredExceptionHandler

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-console-l1-1-0

GetConsoleOutputCP WriteConsoleW

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-crt-string-l1-1-0

wcslen wcscmp strcmp wcsncpy_s iswspace wcsncmp strspn strncmp strcspn strcpy_s _wcsicmp strlen

api-ms-win-crt-math-l1-1-0

truncf __setusermatherr pow ceilf log floorf sinf expf roundf trunc ceil floor round

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback __p___argc _invoke_watson _crt_atexit __p___argv _cexit _invalid_parameter_noinfo _initialize_onexit_table _errno _configure_narrow_argv _set_app_type _exit exit _initterm_e _beginthreadex _initterm _endthreadex terminate _get_initial_narrow_environment _c_exit _initialize_narrow_environment abort _seh_filter_exe _register_onexit_function

api-ms-win-crt-heap-l1-1-0

_msize malloc free calloc _callnewh _set_new_mode realloc

api-ms-win-crt-convert-l1-1-0

wcstol _ultow_s _wtoi

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead InterlockedPushEntrySList

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_8a7a0cf530593ca2a0622500aa0cfd23_akira_glassworm_rusty-stealer

kernel32

advapi32

oleaut32

bcryptprimitives

ntdll

api-ms-win-core-synch-l1-2-0

user32

comctl32

ole32

gdi32

dwmapi

shlwapi

shell32

secur32

ws2_32

crypt32

d3d11

dxgi

api-ms-win-core-profile-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-file-l2-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-io-l1-1-1

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-io-l1-1-0

api-ms-win-core-console-l1-1-0

api-ms-win-core-synch-l1-2-1

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

msvcp140

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

generic