2026-11-10_174c93833a0afed58d541f264aa8c720_akira_glassworm_rusty-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-10_174c93833a0afed58d541f264aa8c720_akira_glassworm_rusty-stealer
Size 20.6MB
Sample261110-lhlttsec97
SHA256 1ee55f549dea5e4328dbb3866c4dab2cb822bdf396ec7c6a34b413551df01a92
MD5 174c93833a0afed58d541f264aa8c720
SHA1 ed79399578d408b0b3828f2a633127f74ec773c1
SHA512 bd3ea3e3d5e1e0e28638edf905d2d824cbe2297cc95bc3f639ddfa49e4f92ec360c114cd6285db86295c3d22d2fa7d19b1b11005868c3d6c9da8eef3c03abe42
SSDEEP 6144:7v8HKCt0cqXDWHx19lYtfBN7njz9i64gjEOWRpyb56qnSD7gj9SPUjMynSV+K22d:7v8qCtLTR1YHnWqb56qn0Mf/cdFxiC
TLSH
T1D7272903F25251B8D05AC1F9835A9133FA7978C94E3175FF27986A312EA5F90AF2D708
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-10_174c93833a0afed58d541f264aa8c720_akira_glassworm_rusty-stealer

File Explorer

2026-11-10_174c93833a0afed58d541f264aa8c720_akira_glassworm_rusty-stealer

.exe 20.6MB

2026-11-10_174c93833a0afed58d541f264aa8c720_akira_glassworm_rusty-stealer

IMPHASH 7360de59cb446208b88f80853196eaa0
SHA256 1ee55f549dea5e4328dbb3866c4dab2cb822bdf396ec7c6a34b413551df01a92
MD5 174c93833a0afed58d541f264aa8c720
SHA1 ed79399578d408b0b3828f2a633127f74ec773c1
SHA512 bd3ea3e3d5e1e0e28638edf905d2d824cbe2297cc95bc3f639ddfa49e4f92ec360c114cd6285db86295c3d22d2fa7d19b1b11005868c3d6c9da8eef3c03abe42
SSDEEP 6144:7v8HKCt0cqXDWHx19lYtfBN7njz9i64gjEOWRpyb56qnSD7gj9SPUjMynSV+K22d:7v8qCtLTR1YHnWqb56qn0Mf/cdFxiC
TLSH
T1D7272903F25251B8D05AC1F9835A9133FA7978C94E3175FF27986A312EA5F90AF2D708
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

470800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

oleaut32

SysFreeString SysStringByteLen SysAllocStringByteLen

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter GetProcessHeap HeapFree CloseHandle FindClose GetCurrentProcessId SetHandleInformation GetLastError GetModuleHandleW GetCurrentProcess SetPriorityClass ProcessIdToSessionId CreateMutexW CreateEventW SetEvent CreateFileW OpenEventW ExitProcess GlobalLock GlobalUnlock GetLogicalDrives GetDriveTypeW GetVolumeInformationW GetDiskFreeSpaceExW GetTickCount64 ReadFile WaitForSingleObject SetFilePointerEx LoadLibraryW GetProcAddress GetComputerNameW GlobalMemoryStatusEx GetCommandLineW SetLastError GlobalAlloc GlobalFree RemoveDirectoryW MoveFileExW SetFileInformationByHandle GetSystemTimePreciseAsFileTime AddVectoredExceptionHandler GetCurrentThread HeapReAlloc GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA lstrlenW CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW FormatMessageW QueryPerformanceFrequency QueryPerformanceCounter CreateThread GetModuleHandleA GetFullPathNameW SetFileTime FindFirstFileExW GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW GetModuleFileNameW GetTempPathW DeleteFileW SwitchToThread CopyFileExW CreateWaitableTimerExW SetWaitableTimer IsProcessorFeaturePresent FindNextFileW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime SetThreadStackGuarantee Sleep

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile NtOpenFile

ole32

CoCreateInstance CoInitializeEx

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

ws2_32

WSAGetLastError getaddrinfo WSADuplicateSocketW ioctlsocket connect select getsockopt setsockopt send WSAStartup WSACleanup recv WSASocketW closesocket freeaddrinfo

vcruntime140

__CxxFrameHandler3 memmove memset memcpy __current_exception_context __current_exception memcmp __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _configure_narrow_argv _initterm_e exit _exit _set_app_type _initialize_narrow_environment __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm _seh_filter_exe terminate _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-10_174c93833a0afed58d541f264aa8c720_akira_glassworm_rusty-stealer

oleaut32

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

ole32

bcrypt

advapi32

ws2_32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic