General
- Target 2026-07-12_ed036430d37545e1093c14b010cc1bb3_akira_glassworm_quasar-rat
- Size 11.5MB
- Sample260712-m2kasaat7v
- SHA256 90d1d1c452a76da0b322d2fd63dfa942ba967b0c470d2c681bbec12b6c8d2566
- MD5 ed036430d37545e1093c14b010cc1bb3
- SHA1 e84a588ca6a9f15f389fa2f9755c6ffcce9e4428
- SHA512 75aeb96c466b5f1c78353540ce330ba12589d3ad7a1581b69452f1a6abdda4c506b78d1a9cce575fc0c971c4db53f55fe5d3a100969b8cc70cc3c0dec8cc7f93
- SSDEEP 98304:pyaLRhfji5p8LS2c6Wmx82WzxOeaIqLvoN+eN3UTsF+1rA72pLqKJUA7+A:pltLRcYRRW30Wiq07
- TLSH T181C65B03F69581E8C4ADC1B4C35BA733EB32B88D4524B25F5BE44B222E26F50AF4D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_ed036430d37545e1093c14b010cc1bb3_akira_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_ed036430d37545e1093c14b010cc1bb3_akira_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_ed036430d37545e1093c14b010cc1bb3_akira_glassworm_quasar-rat
- Size 11.5MB
- SHA256 90d1d1c452a76da0b322d2fd63dfa942ba967b0c470d2c681bbec12b6c8d2566
- MD5 ed036430d37545e1093c14b010cc1bb3
- SHA1 e84a588ca6a9f15f389fa2f9755c6ffcce9e4428
- SHA512 75aeb96c466b5f1c78353540ce330ba12589d3ad7a1581b69452f1a6abdda4c506b78d1a9cce575fc0c971c4db53f55fe5d3a100969b8cc70cc3c0dec8cc7f93
- SSDEEP 98304:pyaLRhfji5p8LS2c6Wmx82WzxOeaIqLvoN+eN3UTsF+1rA72pLqKJUA7+A:pltLRcYRRW30Wiq07
- TLSH T181C65B03F69581E8C4ADC1B4C35BA733EB32B88D4524B25F5BE44B222E26F50AF4D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.