Overview

overview

9

Static

static

3

2026-07-24...-s.exe

windows10-2004-x64

9

2026-07-24...-s.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-24_9ee892332f6dd9a25a58ae4c1aab3ce4_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-stealer_ryuk_stealc_voidlink
  • Size 93.3MB
  • Sample260724-tt4g1she36
  • SHA256 fd96f560525dc3a5e4bfae2c530517dddb5fb84da1ac36a47b2a371a082494bb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
executionpersistence

Malware Config

Targets

    • Target
      2026-07-24_9ee892332f6dd9a25a58ae4c1aab3ce4_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-stealer_ryuk_stealc_voidlink
    • Size 93.3MB
    • SHA256 fd96f560525dc3a5e4bfae2c530517dddb5fb84da1ac36a47b2a371a082494bb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    executionpersistence
    • Custom signature

      Detects executables referencing many IR and analysis tools

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks