Analysis
- max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
20/07/2026, 02:51
General
- Target 2026-07-20_919b9f3b837af43dd3edd9744ab341d3_akira_glassworm_quasar-rat.exe
- Size 14.7MB
- Sample260720-db8e9afy3w
- SHA256 58d6e688fc54056d45966aa266ff33c00e3beb23d65d2d90719864b77586515d
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-20_919b9f3b837af43dd3edd9744ab341d3_akira_glassworm_quasar-rat.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-20_919b9f3b837af43dd3edd9744ab341d3_akira_glassworm_quasar-rat.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jdk-1.8\jre\bin\java.exe"C:\Program Files\Java\jdk-1.8\jre\bin\java.exe" -jar "C:\Users\Admin\AppData\Local\rusherhack\cache\RusherHackInstaller.jar" "C:\Users\Admin"2⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
flatlaf-windows-x86_64-6135981045400.dll
RusherHackInstaller.jar
memory/2852-85-0x0000018F803E0000-0x0000018F803F0000-memory.dmp
memory/2852-119-0x0000018F803F0000-0x0000018F80400000-memory.dmp
memory/2852-242-0x0000018F80490000-0x0000018F804A0000-memory.dmp
memory/2852-22-0x0000018F80270000-0x0000018F80280000-memory.dmp
memory/2852-30-0x0000018F802B0000-0x0000018F802C0000-memory.dmp
memory/2852-29-0x0000018F802A0000-0x0000018F802B0000-memory.dmp
memory/2852-28-0x0000018F80290000-0x0000018F802A0000-memory.dmp
memory/2852-27-0x0000018F80280000-0x0000018F80290000-memory.dmp
memory/2852-32-0x0000018F802C0000-0x0000018F802D0000-memory.dmp
memory/2852-88-0x0000018F803F0000-0x0000018F80400000-memory.dmp
memory/2852-35-0x0000018F802D0000-0x0000018F802E0000-memory.dmp
memory/2852-37-0x0000018F802E0000-0x0000018F802F0000-memory.dmp
memory/2852-40-0x0000018F802F0000-0x0000018F80300000-memory.dmp
memory/2852-39-0x0000018F80000000-0x0000018F80270000-memory.dmp
memory/2852-44-0x0000018F80300000-0x0000018F80310000-memory.dmp
memory/2852-45-0x0000018F80310000-0x0000018F80320000-memory.dmp
memory/2852-48-0x0000018F80320000-0x0000018F80330000-memory.dmp
memory/2852-47-0x0000018F80270000-0x0000018F80280000-memory.dmp
memory/2852-50-0x0000018F80280000-0x0000018F80290000-memory.dmp
memory/2852-53-0x0000018F80330000-0x0000018F80340000-memory.dmp
memory/2852-52-0x0000018F802A0000-0x0000018F802B0000-memory.dmp
memory/2852-51-0x0000018F80290000-0x0000018F802A0000-memory.dmp
memory/2852-241-0x0000018F80480000-0x0000018F80490000-memory.dmp
memory/2852-57-0x0000018F802B0000-0x0000018F802C0000-memory.dmp
memory/2852-58-0x0000018F80350000-0x0000018F80360000-memory.dmp
memory/2852-60-0x0000018F802C0000-0x0000018F802D0000-memory.dmp
memory/2852-61-0x0000018F80360000-0x0000018F80370000-memory.dmp
memory/2852-64-0x0000018F80370000-0x0000018F80380000-memory.dmp
memory/2852-63-0x0000018F802D0000-0x0000018F802E0000-memory.dmp
memory/2852-66-0x0000018F802E0000-0x0000018F802F0000-memory.dmp
memory/2852-67-0x0000018F80380000-0x0000018F80390000-memory.dmp
memory/2852-70-0x0000018F80390000-0x0000018F803A0000-memory.dmp
memory/2852-69-0x0000018F802F0000-0x0000018F80300000-memory.dmp
memory/2852-73-0x0000018F803A0000-0x0000018F803B0000-memory.dmp
memory/2852-72-0x0000018F80300000-0x0000018F80310000-memory.dmp
memory/2852-76-0x0000018F803B0000-0x0000018F803C0000-memory.dmp
memory/2852-75-0x0000018F80310000-0x0000018F80320000-memory.dmp
memory/2852-78-0x0000018F80320000-0x0000018F80330000-memory.dmp
memory/2852-79-0x0000018F803C0000-0x0000018F803D0000-memory.dmp
memory/2852-81-0x0000018F80330000-0x0000018F80340000-memory.dmp
memory/2852-82-0x0000018F803D0000-0x0000018F803E0000-memory.dmp
memory/2852-84-0x0000018F80340000-0x0000018F80350000-memory.dmp
memory/2852-55-0x0000018F80340000-0x0000018F80350000-memory.dmp
memory/2852-15-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-34-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-91-0x0000018F80400000-0x0000018F80410000-memory.dmp
memory/2852-90-0x0000018F80360000-0x0000018F80370000-memory.dmp
memory/2852-94-0x0000018F80370000-0x0000018F80380000-memory.dmp
memory/2852-95-0x0000018F80410000-0x0000018F80420000-memory.dmp
memory/2852-98-0x0000018F80420000-0x0000018F80430000-memory.dmp
memory/2852-97-0x0000018F80380000-0x0000018F80390000-memory.dmp
memory/2852-100-0x0000018F80390000-0x0000018F803A0000-memory.dmp
memory/2852-101-0x0000018F80430000-0x0000018F80440000-memory.dmp
memory/2852-103-0x0000018F803A0000-0x0000018F803B0000-memory.dmp
memory/2852-104-0x0000018F80440000-0x0000018F80450000-memory.dmp
memory/2852-106-0x0000018F803B0000-0x0000018F803C0000-memory.dmp
memory/2852-107-0x0000018F80450000-0x0000018F80460000-memory.dmp
memory/2852-110-0x0000018F80460000-0x0000018F80470000-memory.dmp
memory/2852-109-0x0000018F803C0000-0x0000018F803D0000-memory.dmp
memory/2852-113-0x0000018F80470000-0x0000018F80480000-memory.dmp
memory/2852-112-0x0000018F803D0000-0x0000018F803E0000-memory.dmp
memory/2852-115-0x0000018F803E0000-0x0000018F803F0000-memory.dmp
memory/2852-116-0x0000018F80480000-0x0000018F80490000-memory.dmp
memory/2852-120-0x0000018F80490000-0x0000018F804A0000-memory.dmp
memory/2852-87-0x0000018F80350000-0x0000018F80360000-memory.dmp
memory/2852-6-0x0000018F80000000-0x0000018F80270000-memory.dmp
memory/2852-132-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-136-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-143-0x0000018F80400000-0x0000018F80410000-memory.dmp
memory/2852-147-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-158-0x0000018F80410000-0x0000018F80420000-memory.dmp
memory/2852-162-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-165-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-172-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-174-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-182-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-190-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-193-0x0000018FFD5A0000-0x0000018FFD5A1000-memory.dmp
memory/2852-234-0x0000018F80420000-0x0000018F80430000-memory.dmp
memory/2852-236-0x0000018F80430000-0x0000018F80440000-memory.dmp
memory/2852-237-0x0000018F80440000-0x0000018F80450000-memory.dmp
memory/2852-238-0x0000018F80450000-0x0000018F80460000-memory.dmp
memory/2852-239-0x0000018F80460000-0x0000018F80470000-memory.dmp
memory/2852-240-0x0000018F80470000-0x0000018F80480000-memory.dmp
memory/4920-0-0x00007FF7CED90000-0x00007FF7CFA17000-memory.dmp
memory/4920-20-0x00007FF7CED90000-0x00007FF7CFA17000-memory.dmp