General
- Target 2026-08-03_03ed7ecb95992f63a91cdbf81117db8a_akira_quasar-rat
- Size 11.1MB
- Sample260804-d6djcscd76
- SHA256 082bab737bc9f5f79154d2b6a414ab8b58d7476963edae658abe91168d6150e7
- MD5 03ed7ecb95992f63a91cdbf81117db8a
- SHA1 69611a3a35bcb40bb56d192996f4d1be6d0d3758
- SHA512 28133c17e534ef45ace16dc9630e06921e783db1c5b69ac85e24f654d66bdb1e40f9df34ee70c3ee6f299090059e64ad28aecf893efb9f88ae7963c04402b752
- SSDEEP 196608:TGpQBMgHjvlWVvElLfS4h2Yut8SnqA1D7lmDOdbh966Y:TGpQVDdcgLq4haXtmDOd1nY
- TLSH T19AC6125DBBAEF298CC36C6F71591817FE43779EA40E9B02E1E5432319E127162938CE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_03ed7ecb95992f63a91cdbf81117db8a_akira_quasar-rat.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_03ed7ecb95992f63a91cdbf81117db8a_akira_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_03ed7ecb95992f63a91cdbf81117db8a_akira_quasar-rat
- Size 11.1MB
- SHA256 082bab737bc9f5f79154d2b6a414ab8b58d7476963edae658abe91168d6150e7
- MD5 03ed7ecb95992f63a91cdbf81117db8a
- SHA1 69611a3a35bcb40bb56d192996f4d1be6d0d3758
- SHA512 28133c17e534ef45ace16dc9630e06921e783db1c5b69ac85e24f654d66bdb1e40f9df34ee70c3ee6f299090059e64ad28aecf893efb9f88ae7963c04402b752
- SSDEEP 196608:TGpQBMgHjvlWVvElLfS4h2Yut8SnqA1D7lmDOdbh966Y:TGpQVDdcgLq4haXtmDOd1nY
- TLSH T19AC6125DBBAEF298CC36C6F71591817FE43779EA40E9B02E1E5432319E127162938CE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Clears Windows event logs
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies Windows Firewall
-
Disables service(s)
-
Stops running service(s)
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1System Services
2Service Execution
2Windows Management Instrumentation
1