2026-11-07_8eac0e7e568436479c1ab1d5fb0ef14a_akira_glassworm_quasar-rat_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-07_8eac0e7e568436479c1ab1d5fb0ef14a_akira_glassworm_quasar-rat_rusty-stealer
Size 6.3MB
Sample261107-pbghbabv4v
SHA256 daec98ba6d23b10442f39bddc913c31235a7d738db615b657e51f219ad77b328
MD5 8eac0e7e568436479c1ab1d5fb0ef14a
SHA1 e06117e749a9303533576a3b36e9f3db6395c971
SHA512 62c2279348349cf428ea1c13a6af4fb24f37712a8569e1937f556d98686ade781de6703e207ad0453178652c90a876e63e6b4792b0b1f9769dd42657d710e8d8
SSDEEP 49152:kLY9nO+/hvZN3eXv/9tFBfalNOKlKaedrSOusH6umNkvqXbrzXvw8iQ2nziBGHXh:kU7A3n1qXXvGsZb0mBw
TLSH
T131666B12BB5B9AADC01AC474834686735A2270CB0B39A9FF45C955382F6AFF05F3C359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-07_8eac0e7e568436479c1ab1d5fb0ef14a_akira_glassworm_quasar-rat_rusty-stealer

File Explorer

2026-11-07_8eac0e7e568436479c1ab1d5fb0ef14a_akira_glassworm_quasar-rat_rusty-stealer

.exe 6.3MB

2026-11-07_8eac0e7e568436479c1ab1d5fb0ef14a_akira_glassworm_quasar-rat_rusty-stealer

IMPHASH 900bdf5445ae32f3b4444c7aeb8c1952
SHA256 daec98ba6d23b10442f39bddc913c31235a7d738db615b657e51f219ad77b328
MD5 8eac0e7e568436479c1ab1d5fb0ef14a
SHA1 e06117e749a9303533576a3b36e9f3db6395c971
SHA512 62c2279348349cf428ea1c13a6af4fb24f37712a8569e1937f556d98686ade781de6703e207ad0453178652c90a876e63e6b4792b0b1f9769dd42657d710e8d8
SSDEEP 49152:kLY9nO+/hvZN3eXv/9tFBfalNOKlKaedrSOusH6umNkvqXbrzXvw8iQ2nziBGHXh:kU7A3n1qXXvGsZb0mBw
TLSH
T131666B12BB5B9AADC01AC474834686735A2270CB0B39A9FF45C955382F6AFF05F3C359
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3682052

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

qwalkingpad.pdb

kernel32

MultiByteToWideChar GlobalFree WideCharToMultiByte GlobalSize GlobalUnlock GetModuleHandleA SetLastError GlobalAlloc GlobalLock GetCurrentThreadId Sleep GetQueuedCompletionStatusEx CancelIoEx ConnectNamedPipe DisconnectNamedPipe WriteFile ReadFile PostQueuedCompletionStatus GetOverlappedResult CreateIoCompletionPort CreateNamedPipeW SetNamedPipeHandleState CreateFileW lstrlenW GetModuleFileNameW SetThreadErrorMode LoadLibraryExW FormatMessageW GetLastError HeapFree GetCurrentThread HeapAlloc GetProcessHeap RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext LoadLibraryW GetExitCodeProcess GetSystemInfo QueryPerformanceCounter GetSystemTimePreciseAsFileTime WriteFileEx CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW CompareStringOrdinal FreeEnvironmentStringsW GetFileAttributesW SleepEx ReadFileEx CreateWaitableTimerExW SetWaitableTimer CreateThread GetConsoleOutputCP GetStdHandle WriteConsoleW QueryPerformanceFrequency ExitProcess IsProcessorFeaturePresent GetFullPathNameW GetModuleHandleW GetConsoleMode FindClose FindFirstFileExW GetFileInformationByHandle SwitchToThread GetFileInformationByHandleEx SetUnhandledExceptionFilter LoadLibraryA CreateDirectoryW GetCommandLineW GetEnvironmentVariableW GetEnvironmentStringsW FreeLibrary GetCurrentDirectoryW SetThreadStackGuarantee GetProcAddress LoadLibraryExA GetSystemTimeAsFileTime AddVectoredExceptionHandler InitializeSListHead IsDebuggerPresent WaitForSingleObject CloseHandle UnhandledExceptionFilter GetTimeZoneInformationForYear DuplicateHandle SetFileTime FlushFileBuffers SetFileInformationByHandle SetFilePointerEx ReleaseMutex CreateMutexA GetCurrentProcessId WaitForSingleObjectEx GetCurrentProcess HeapReAlloc

ole32

CoIncrementMTAUsage RevokeDragDrop CoTaskMemFree CoUninitialize CoCreateInstance CoCreateFreeThreadedMarshaler OleInitialize CoInitializeEx RegisterDragDrop

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

oleaut32

SetErrorInfo GetErrorInfo SysStringLen SysFreeString

shlwapi

AssocQueryStringW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

shell32

DragFinish DragQueryFileW SHGetKnownFolderPath

ntdll

RtlNtStatusToDosError NtDeviceIoControlFile NtCancelIoFileEx NtWriteFile NtReadFile NtCreateNamedPipeFile NtOpenFile

user32

AdjustWindowRectEx GetMenu GetWindowRect GetWindowLongW SetWindowLongW EnableMenuItem GetSystemMenu ShowWindow ShowCursor ClipCursor GetClipCursor GetRawInputData SendInput SetForegroundWindow IsProcessDPIAware SetWindowDisplayAffinity GetWindowTextLengthW GetWindowTextW SetWindowTextW DestroyIcon DestroyCursor GetCursorPos MonitorFromWindow GetMonitorInfoW MsgWaitForMultipleObjectsEx SetWindowLongPtrW MapVirtualKeyW RegisterTouchWindow EnumDisplayMonitors MonitorFromPoint SystemParametersInfoA ReleaseCapture SetCapture RegisterWindowMessageA SetWindowPlacement FlashWindowEx SetCursor LoadCursorW SetWindowPos GetForegroundWindow SetCursorPos RegisterClassExW GetClassInfoExW GetClassNameW GetWindowPlacement CreateIconFromResourceEx SendMessageW GetSystemMetrics CreateIcon GetActiveWindow GetClientRect GetWindowLongPtrW PostMessageW DispatchMessageW TranslateMessage PeekMessageW GetAsyncKeyState RegisterHotKey CreateWindowExW RegisterClassW DefWindowProcW DestroyWindow ScreenToClient MonitorFromRect TrackMouseEvent GetTouchInputInfo CloseClipboard RegisterClipboardFormatW CloseTouchInputHandle GetClipboardData SetClipboardData OpenClipboard IsClipboardFormatAvailable EmptyClipboard ChangeDisplaySettingsExW InvalidateRgn ClientToScreen GetDC RedrawWindow ReleaseDC ValidateRect MapVirtualKeyExW GetKeyboardState GetKeyState GetKeyboardLayout RegisterRawInputDevices ToUnicodeEx IsIconic

gdi32

ChoosePixelFormat DeleteObject SwapBuffers DescribePixelFormat SetPixelFormat GetDeviceCaps CreateRectRgn

advapi32

ImpersonateAnonymousToken RevertToSelf

bcryptprimitives

ProcessPrng

opengl32

wglMakeCurrent wglCreateContext wglGetProcAddress wglDeleteContext wglGetCurrentDC wglGetCurrentContext wglShareLists

imm32

ImmSetCandidateWindow ImmGetContext ImmSetCompositionWindow ImmGetCompositionStringW ImmAssociateContextEx ImmReleaseContext

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow

uxtheme

SetWindowTheme

vcruntime140

memset memcmp memmove memcpy _CxxThrowException __C_specific_handler __CxxFrameHandler3 __current_exception __current_exception_context

api-ms-win-crt-math-l1-1-0

truncf pow trunc ceilf sin floor sinf _hypotf cosf cos atan2f floorf fmod expf log10 roundf exp2f acosf powf round ceil cbrtf __setusermatherr

api-ms-win-crt-string-l1-1-0

wcslen strlen

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _set_app_type _seh_filter_exe _get_initial_narrow_environment _initterm exit _exit _configure_narrow_argv __p___argc __p___argv terminate strerror _crt_atexit _register_onexit_function _cexit _c_exit _initialize_onexit_table _register_thread_local_exe_atexit_callback _initterm_e

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-07_8eac0e7e568436479c1ab1d5fb0ef14a_akira_glassworm_quasar-rat_rusty-stealer

kernel32

ole32

api-ms-win-core-winrt-l1-1-0

oleaut32

shlwapi

api-ms-win-core-synch-l1-2-0

shell32

ntdll

user32

gdi32

advapi32

bcryptprimitives

opengl32

imm32

dwmapi

uxtheme

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic