50bce6ed741031fc490873d65c42ae15e02fcac49f73c12efd8febc01819dbc4

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/06/2026, 04:38

Target
2026-06-29_b48280e5cea9d6799f442d446da4f7d7_akira_quasar-rat.exe
Size 1.9MB
Sample260630-e9eq9sfs2m
SHA256 50bce6ed741031fc490873d65c42ae15e02fcac49f73c12efd8febc01819dbc4
MD5 b48280e5cea9d6799f442d446da4f7d7
SHA1 017150ea88e8b9f21b9d351e0a595d870933a461
SHA512 4f23773252cfc29718ab297789cfd3ac63cac1ed661969fe8df5958dd9ae0d8bf1c71df0b468f0550e335577ee155bc8dafbca09441434a74ee5d362421b26a7
SSDEEP 49152:koTF5qGHJgGpzejlLl3kdEkXN7KHrc1CERDTulpwpOlP:ppgGpzQAEkXNuHjW43
TLSH
T1F9950207F6A3A07CE11AC0759346A573BE77B88A02327DBB13E4C6343FA5E516B18B15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

Detects executables embedding registry key / value combination indicative of disabling Windows Defen 1 IoCs

resource	yara_rule
behavioral1/memory/3920-0-0x00007FF68F260000-0x00007FF68F447000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_RegKeyComb_DisableWinDefender

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral1/memory/3920-0-0x00007FF68F260000-0x00007FF68F447000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/3920-0-0x00007FF68F260000-0x00007FF68F447000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-06-29_b48280e5cea9d6799f442d446da4f7d7_akira_quasar-rat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-29_b48280e5cea9d6799f442d446da4f7d7_akira_quasar-rat.exe"
1⤵
PID:3920

memory/3920-0-0x00007FF68F260000-0x00007FF68F447000-memory.dmp

Download

memory/3920-1-0x00007FF68F260000-0x00007FF68F447000-memory.dmp

Download