Analysis
- max time kernel
150s - max time network
121s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
- submitted
09/07/2026, 15:07
General
- Target 2026-07-09_03d69461c904ad5f498f29989712256b_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe
- Size 93.3MB
- Sample260709-shbgesdv8w
- SHA256 1364deb30f7ae33b5719a83e15d29840718df951324e31f42cc9e8092779a356
Malware Config
Signatures
- Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-09_03d69461c904ad5f498f29989712256b_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-09_03d69461c904ad5f498f29989712256b_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe"1⤵
- Maps connected drives based on registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5740-1-0x00000247FD410000-0x00000247FD411000-memory.dmp
memory/5740-0-0x00000247FD412000-0x00000247FD413000-memory.dmp
memory/5740-3-0x00000247FD414000-0x00000247FD415000-memory.dmp
memory/5740-2-0x00000247FD413000-0x00000247FD414000-memory.dmp
memory/5740-5-0x00000247FD415000-0x00000247FD416000-memory.dmp
memory/5740-6-0x000002483D40E000-0x000002483D40F000-memory.dmp
memory/5740-7-0x00000247FD417000-0x00000247FD418000-memory.dmp
memory/5740-4-0x00000247FD416000-0x00000247FD417000-memory.dmp
memory/5740-10-0x00000247FD419000-0x00000247FD41A000-memory.dmp
memory/5740-40-0x00000247FD411000-0x00000247FD412000-memory.dmp
memory/5740-39-0x00000247FD41C000-0x00000247FD41D000-memory.dmp
memory/5740-42-0x00000247FD41D000-0x00000247FD41F000-memory.dmp
memory/5740-41-0x00000247FD412000-0x00000247FD413000-memory.dmp
memory/5740-46-0x00000247FD414000-0x00000247FD415000-memory.dmp
memory/5740-45-0x00000247FD421000-0x00000247FD422000-memory.dmp
memory/5740-44-0x00000247FD41F000-0x00000247FD420000-memory.dmp
memory/5740-43-0x00000247FD420000-0x00000247FD421000-memory.dmp
memory/5740-38-0x00000247FD41B000-0x00000247FD41C000-memory.dmp
memory/5740-37-0x00000247FD41A000-0x00000247FD41B000-memory.dmp
memory/5740-48-0x00000247FD422000-0x00000247FD423000-memory.dmp
memory/5740-47-0x00000247FD415000-0x00000247FD416000-memory.dmp
memory/5740-50-0x00000247FD423000-0x00000247FD424000-memory.dmp
memory/5740-49-0x00000247FD416000-0x00000247FD417000-memory.dmp
memory/5740-51-0x00000247EF000000-0x00000247F0000000-memory.dmp
memory/5740-52-0x00000247EF000000-0x00000247F0000000-memory.dmp
memory/5740-53-0x00000247EF000000-0x00000247F0000000-memory.dmp