dff4d3ecd9113c7c0fa5b7c45dd8c1350f8bc176cc3b0709ef8169ad35c71b83

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 04:22

Target
2026-07-31_7463fa6bd0650f0a3c78c0c97ed96c38_akira_glassworm_helldown_poet-rat_qakbot_quasar-rat.exe
Size 99.8MB
Sample260731-ezrm3stfmc
SHA256 dff4d3ecd9113c7c0fa5b7c45dd8c1350f8bc176cc3b0709ef8169ad35c71b83
MD5 7463fa6bd0650f0a3c78c0c97ed96c38
SHA1 dc48ad9fdb84729ad020be3785b46b7201f66472
SHA512 9ea130e9d6d2378a098ba69418ac68c4bd2567c52b4e07410c87e621a66f02a8c89fabb3145b218368080c373c5cb59218e9e069e55b92604c209191992aa879
SSDEEP 786432:eyxTHBSYI//EknGdZukR59SChP0BIf1RTtuQaleP:eyxThSYI//EkGLR5cA2IwQalK
TLSH
T126384B53F2B370ECC567C13092DBA633FA73B85951396D6AD6A0CB742F21E506329E24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2592	2026-07-31_7463fa6bd0650f0a3c78c0c97ed96c38_akira_glassworm_helldown_poet-rat_qakbot_quasar-rat.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-31_7463fa6bd0650f0a3c78c0c97ed96c38_akira_glassworm_helldown_poet-rat_qakbot_quasar-rat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-31_7463fa6bd0650f0a3c78c0c97ed96c38_akira_glassworm_helldown_poet-rat_qakbot_quasar-rat.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2592