Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 02:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
- Size 2.7MB
- Sample260720-cwspvscv8m
- SHA256 3f5209389b7fcecffba5fddd6bc335ef63f3728d564766d24cb1cf41ad3ecd45
- MD5 ede32bc0667d64f0f67a8a9d4e87fb71
- SHA1 635276c6db4668e1393b119d804128e068b13caf
- SHA512 d60966deb2a6e4ddcd2e6c782209b7b8b1b753a0f7a564834502fd3113012d03cfd1c382203c80eb0b77590d2042baabe3e8f1589d771ec0ac98eb52d5c316fc
- SSDEEP 24576:/4qHQuAChM9a29MB7l+6pptTCgF1pYANe+EQT9GPoMdW87ZdGmGffVIH06iyp8mv:/4qn2a2ug6PVDYg0gMJHkIU6ie8mQhm
- TLSH T1A6D58D13E1D540E8D4AEC078D7169633AA72B8DD0A34B6AB1BF05A112F7AFD06F2C715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 4936 2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-20_ede32bc0667d64f0f67a8a9d4e87fb71_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe"1⤵
- Checks BIOS information in registry
- Suspicious behavior: EnumeratesProcesses
PID:4936