Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 17:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
- Size 2.6MB
- Sample260730-vxyxdatapd
- SHA256 29a679c8497a194d99314f537c6a1c107a24680231aa5898b90051f19de4ef6a
- MD5 88053a18b58bc76a145ef6da443f2c3a
- SHA1 77575750c8f7667a477b66476be2259ea04c17b3
- SHA512 a9a707d1be9472a16599948fc52268b59caa6b5afdab1a73e228db8a95cd4dca526ead7543fa4722ec4d3b4f428adea807c45514fd13ff74c8eec74ee1b34d88
- SSDEEP 49152:ezGaotsshd8khioS/hfoFm2L25eYmeT9TBMgzIU6ie8XuhG6:ea/SZfL3T91C+e8
- TLSH T136C58D07E1D540E8D4AEC178D7165633BA72B8D90A34B6AF1BE0DA112F7AF906F2C705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe 5552 2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-30_88053a18b58bc76a145ef6da443f2c3a_akira_glassworm_icedid_megazord_njrat_rusty-stealer_ryuk.exe"1⤵
- Checks BIOS information in registry
- Suspicious behavior: EnumeratesProcesses
PID:5552