Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/07/2026, 02:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
- Size 2.7MB
- Sample260721-c2sxtaes7w
- SHA256 52ba6468d053fc6f951753b5fbbfaa160141c238482824274b1662a4356980a1
- MD5 7d3b77668392dcad7fadb264ae5cf5b6
- SHA1 de65d5ccbd55f123884d0d42abb891fe66ea9aa8
- SHA512 f33ca04dd0dda29a0654efa16fe7190a658a1f5ce4eed1af2e7cc6cee124848ffdb11bb23d3fb8b307f84fe50a5c60146a3e2b80da91f6b86926dbae4df910ac
- SSDEEP 49152:KJz5NsFUDqXvdQKki99bntEuqXUIU6ie8K9hjyi:SbdDqHjntT++e8Fi
- TLSH T1C9D58D13E1D540E8D4AEC074D7169633AA76B8DD0A34B6AF1BE05A102F7AFD0AF2C715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 2420 2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-21_7d3b77668392dcad7fadb264ae5cf5b6_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe"1⤵
- Checks BIOS information in registry
- Suspicious behavior: EnumeratesProcesses
PID:2420