2026-06-29_b48280e5cea9d6799f442d446da4f7d7_akira_quasar-rat

General

Target
2026-06-29_b48280e5cea9d6799f442d446da4f7d7_akira_quasar-rat
Size 1.9MB
Sample260630-e9eq9sfs2m
SHA256 50bce6ed741031fc490873d65c42ae15e02fcac49f73c12efd8febc01819dbc4
MD5 b48280e5cea9d6799f442d446da4f7d7
SHA1 017150ea88e8b9f21b9d351e0a595d870933a461
SHA512 4f23773252cfc29718ab297789cfd3ac63cac1ed661969fe8df5958dd9ae0d8bf1c71df0b468f0550e335577ee155bc8dafbca09441434a74ee5d362421b26a7
SSDEEP 49152:koTF5qGHJgGpzejlLl3kdEkXN7KHrc1CERDTulpwpOlP:ppgGpzQAEkXNuHjW43
TLSH
T1F9950207F6A3A07CE11AC0759346A573BE77B88A02327DBB13E4C6343FA5E516B18B15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx

Detects executables embedding registry key / value combination indicative of disabling Windows Defen 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RegKeyComb_DisableWinDefender

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-29_b48280e5cea9d6799f442d446da4f7d7_akira_quasar-rat

SHA256 50bce6ed741031fc490873d65c42ae15e02fcac49f73c12efd8febc01819dbc4
MD5 b48280e5cea9d6799f442d446da4f7d7
SHA1 017150ea88e8b9f21b9d351e0a595d870933a461
SHA512 4f23773252cfc29718ab297789cfd3ac63cac1ed661969fe8df5958dd9ae0d8bf1c71df0b468f0550e335577ee155bc8dafbca09441434a74ee5d362421b26a7
SSDEEP 49152:koTF5qGHJgGpzejlLl3kdEkXN7KHrc1CERDTulpwpOlP:ppgGpzQAEkXNuHjW43
TLSH
T1F9950207F6A3A07CE11AC0759346A573BE77B88A02327DBB13E4C6343FA5E516B18B15
MD5 SHA1 SHA512 SSDEEP TLSH

Detects executables embedding registry key / value combination indicative of disabling Windows Defen
UPX dump on OEP (original entry point)
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths