General
- Target 2026-07-27_4a8800b32840a6f91bde4d6303f37efc_akira_quasar-rat
- Size 2.2MB
- Sample260727-kd8mcsab23
- SHA256 8ebe170b3965ac4cd7a69667b7c312bd19863f91ec2706faea36762c978dbf31
- MD5 4a8800b32840a6f91bde4d6303f37efc
- SHA1 4ee524d331c1ece46f8329a486704c9a339278d4
- SHA512 429ff02e9e14b06990de47bd8b4e8c00c3c4103caecf8abe031dbcc8a21e28605503a9970a57e231ac81da00e1cc3193c32d0db2712469d882437b66043f8727
- SSDEEP 24576:nt06jlL7Lb5LeimhzPAkT5UVZnBUKttEKaBAGY/jSqycwsCSciv:nt04L7LNLeimZPAlV1BBttIiSMv
- TLSH T12DB54A4B7EB1A1A8E0F985B4C253F422EE27784B161459BA73DC57319F61A033AC877C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-27_4a8800b32840a6f91bde4d6303f37efc_akira_quasar-rat.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_4a8800b32840a6f91bde4d6303f37efc_akira_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_4a8800b32840a6f91bde4d6303f37efc_akira_quasar-rat
- Size 2.2MB
- SHA256 8ebe170b3965ac4cd7a69667b7c312bd19863f91ec2706faea36762c978dbf31
- MD5 4a8800b32840a6f91bde4d6303f37efc
- SHA1 4ee524d331c1ece46f8329a486704c9a339278d4
- SHA512 429ff02e9e14b06990de47bd8b4e8c00c3c4103caecf8abe031dbcc8a21e28605503a9970a57e231ac81da00e1cc3193c32d0db2712469d882437b66043f8727
- SSDEEP 24576:nt06jlL7Lb5LeimhzPAkT5UVZnBUKttEKaBAGY/jSqycwsCSciv:nt04L7LNLeimZPAlV1BBttIiSMv
- TLSH T12DB54A4B7EB1A1A8E0F985B4C253F422EE27784B161459BA73DC57319F61A033AC877C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Disables Task Manager via registry modification
-
Stops running service(s)
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
4Windows Service
4Event Triggered Execution
1Netsh Helper DLL
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Create or Modify System Process
4Windows Service
4Event Triggered Execution
1Netsh Helper DLL
1