2026-07-19_25f468ea48d1708ddf4f92f2ae41ebd7_akira_glassworm_quasar-rat

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-19_25f468ea48d1708ddf4f92f2ae41ebd7_akira_glassworm_quasar-rat
Size 1.9MB
Sample260719-e2g7eset9z
SHA256 7d53b1381f46a01f11e0eeaac89bca80e075d2658932eaaecda58c909fed10c7
MD5 25f468ea48d1708ddf4f92f2ae41ebd7
SHA1 815d8edd3420dc74e2cadad33edf061377ca3e52
SHA512 5b24c95bb6c240c986a8fb00338ee0f5ff9e757ddf7528b2d50718936ee10edeb80be3f4f049afbef3e2a76be8d2ad4bc5ca14334c3cc821fe4fc092aea92c7f
SSDEEP 49152:5glxyDCQHCfBcPvFxQEpbMPJgRu4w/MzjLZib2/d:52epQsBd
TLSH
T149956C03F6A640FDD06BC1B4875A9333FA31B8491534B96F27A8DB202F55E60AF1E758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-07-19_25f468ea48d1708ddf4f92f2ae41ebd7_akira_glassworm_quasar-rat

File Explorer

2026-07-19_25f468ea48d1708ddf4f92f2ae41ebd7_akira_glassworm_quasar-rat

.exe 1.9MB

2026-07-19_25f468ea48d1708ddf4f92f2ae41ebd7_akira_glassworm_quasar-rat

IMPHASH f8844187b7036091e23e5393caf63275
SHA256 7d53b1381f46a01f11e0eeaac89bca80e075d2658932eaaecda58c909fed10c7
MD5 25f468ea48d1708ddf4f92f2ae41ebd7
SHA1 815d8edd3420dc74e2cadad33edf061377ca3e52
SHA512 5b24c95bb6c240c986a8fb00338ee0f5ff9e757ddf7528b2d50718936ee10edeb80be3f4f049afbef3e2a76be8d2ad4bc5ca14334c3cc821fe4fc092aea92c7f
SSDEEP 49152:5glxyDCQHCfBcPvFxQEpbMPJgRu4w/MzjLZib2/d:52epQsBd
TLSH
T149956C03F6A640FDD06BC1B4875A9333FA31B8491534B96F27A8DB202F55E60AF1E758
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

01:c4:4b:6f:5c:ca:d0:82:94:61:c6:85:ea:4d:cf:11:db:15:68:ee:20:06:18:e9:d2:6f:8f:5f:77:4f:40:c7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Titancore Labs,O=Titancore Labs,ST=Utah,C=US

Chains

Jul 17, 2026

CN=Titancore Labs,O=Titancore Labs,ST=Utah,C=US

CN=Titancore Labs Root CA,O=Titancore Labs,ST=Utah,C=US

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

oleaut32

SysAllocString SysFreeString VariantInit

ntdll

RtlInitUnicodeString RtlCopySid RtlFreeSid RtlFreeHeap RtlNtStatusToDosError

version

GetFileVersionInfoSizeW

user32

CloseClipboard DestroyWindow GetClientRect GetClipboardData GetCursorPos GetDC GetDesktopWindow GetSystemMetrics LoadCursorW LoadIconW OpenClipboard ReleaseDC SendMessageA SetWindowTextW

comdlg32

GetOpenFileNameW

advapi32

GetUserNameW RegCloseKey RegEnumKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW SystemFunction036

shlwapi

PathCombineW

winmm

timeGetTime

dwmapi

DwmIsCompositionEnabled

comctl32

InitCommonControlsEx

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

uxtheme

IsThemeActive

ole32

CoCreateGuid CoInitializeEx

kernel32

AddVectoredExceptionHandler AreFileApisANSI CancelIo CloseHandle CompareStringOrdinal CreateDirectoryW CreateEventW CreateFileA CreateFileMappingA CreateFileMappingW CreateFileW CreateMutexA CreateMutexW CreateProcessA CreateProcessW CreateThread GetProcessAffinityMask DeleteCriticalSection DeleteFileA DeleteFileW DuplicateHandle EnterCriticalSection FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GetComputerNameW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceA GetDiskFreeSpaceExA GetDiskFreeSpaceW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSize GetFullPathNameA GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathA GetTempPathW GetTickCount GetTickCount64 GetWindowsDirectoryW GlobalLock GlobalMemoryStatusEx GlobalUnlock HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize HeapValidate InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFree LockFile LockFileEx MapViewOfFile GetTimeFormatA GetDriveTypeA MultiByteToWideChar GetComputerNameExA FillConsoleOutputW QueryPerformanceCounter RaiseException ReadFile ReadFileEx RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetFileInformationByHandle SetFilePointer SetFilePointerEx SetFileTime SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep SleepEx SystemTimeToFileTime TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnlockFile UnlockFileEx UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile WriteFileEx __C_specific_handler

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _beginthreadex _cexit _commode _endthreadex _errno _fmode _fpreset _initterm _localtime64 abort atexit calloc exit fprintf free malloc memchr memcmp memcpy memmove memset qsort realloc signal strchr strcmp strcspn strlen strncmp strrchr strspn vfprintf

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateFontIndirectW DeleteDC DeleteObject GetDIBits GetDeviceCaps GetStockObject SelectObject

imm32

ImmGetContext ImmReleaseContext

bcrypt

BCryptGenRandom

shell32

DragAcceptFiles SHGetFolderPathW

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

203KB

Virtual Size

203KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

57KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

768B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls$

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-19_25f468ea48d1708ddf4f92f2ae41ebd7_akira_glassworm_quasar-rat

PE Signature issue

oleaut32

ntdll

version

user32

comdlg32

advapi32

shlwapi

winmm

dwmapi

comctl32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

uxtheme

ole32

kernel32

msvcrt

gdi32

imm32

bcrypt

shell32

generic