1f525c73d0db8816594b811476657d7c1ce74c3e66730fdd940f791457d49d8e

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 02:41

Target
2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe
Size 913KB
Sample260729-c6ynvsvth1
SHA256 1f525c73d0db8816594b811476657d7c1ce74c3e66730fdd940f791457d49d8e
MD5 7c219ab1c03d3c0c7ecde4dd575bb57f
SHA1 f752a7f46641af167f5d6cd0175b8ea148d91a4b
SHA512 974684a66e4e7b4c65d4b148b7d4aa46467f035017485450e5adfc01a329b3383612ff7373786d8e9d45b071b5025c3c50dbaf1c266cfa345a279d71f03f7700
SSDEEP 24576:Mh8hjqZrgVvrGUR6PY1JYhqRfktjqeOhjlQiYbqCu:rhOZrDcktjVOhjqqb
TLSH
T1CB159D87F5E751BCD26BC07483669A73FA31F84841107EBB56E4CB303D62E906B18B69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3440 set thread context of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 3440 wrote to memory of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89
PID 3440 wrote to memory of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89
PID 3440 wrote to memory of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89
PID 3440 wrote to memory of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89
PID 3440 wrote to memory of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89
PID 3440 wrote to memory of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89
PID 3440 wrote to memory of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89
PID 3440 wrote to memory of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89
PID 3440 wrote to memory of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89
PID 3440 wrote to memory of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89
PID 3440 wrote to memory of 5908	3440	2026-07-29_7c219ab1c03d3c0c7ecde4dd575bb57f_akira_quasar-rat.exe	89

memory/3440-3-0x00007FF7B08F0000-0x00007FF7B09DB000-memory.dmp

Download

memory/5908-0-0x00007FF7DABE0000-0x00007FF7DAC2B000-memory.dmp

Download