2026-08-04_56d0aa82db933f21c4b67046bc7c0e19_akira_glassworm_quasar-rat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_56d0aa82db933f21c4b67046bc7c0e19_akira_glassworm_quasar-rat
Size 2.0MB
Sample260804-h263bsteqb
SHA256 0753b00616490fe7ba8d77e1e19632cf2c12b0f4a7012a348dceef7752984f13
MD5 56d0aa82db933f21c4b67046bc7c0e19
SHA1 ad278874aa738e5e5c8ab2d00fc497a841bbb99b
SHA512 fc3970c4e92ab95ad82d1ad1bfaa480b513cfeb25a3ec1c5da8f79c10b092cc771dec366e3e5ec98a68e371fe997c999fe2bde748d099c974f16662ed3e046a0
SSDEEP 49152:jDq0OUoCrTfsLsCaYzXYXF0ASgwJHICf4:WULf5yewt4
TLSH
T1EFA53B43FB6295FCC2A9C07482466272FB32FC4D09217BAB5BE48A313E65B505F5CB58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_56d0aa82db933f21c4b67046bc7c0e19_akira_glassworm_quasar-rat

File Explorer

2026-08-04_56d0aa82db933f21c4b67046bc7c0e19_akira_glassworm_quasar-rat

.exe 2.0MB

2026-08-04_56d0aa82db933f21c4b67046bc7c0e19_akira_glassworm_quasar-rat

IMPHASH 7ca9fa2969fbdec6696b615f6a6aabaf
SHA256 0753b00616490fe7ba8d77e1e19632cf2c12b0f4a7012a348dceef7752984f13
MD5 56d0aa82db933f21c4b67046bc7c0e19
SHA1 ad278874aa738e5e5c8ab2d00fc497a841bbb99b
SHA512 fc3970c4e92ab95ad82d1ad1bfaa480b513cfeb25a3ec1c5da8f79c10b092cc771dec366e3e5ec98a68e371fe997c999fe2bde748d099c974f16662ed3e046a0
SSDEEP 49152:jDq0OUoCrTfsLsCaYzXYXF0ASgwJHICf4:WULf5yewt4
TLSH
T1EFA53B43FB6295FCC2A9C07482466272FB32FC4D09217BAB5BE48A313E65B505F5CB58
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5136

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddVectoredExceptionHandler FormatMessageW GetCommandLineW GetCurrentDirectoryW GetEnvironmentVariableW GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetSystemTimePreciseAsFileTime SetUnhandledExceptionFilter CloseHandle CreateFileMappingA CreateToolhelp32Snapshot GetCurrentProcess GetCurrentThread GetProcAddress MapViewOfFile Module32FirstW Module32NextW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnmapViewOfFile CreateFileW DuplicateHandle ExitProcess GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentThreadId GetFileInformationByHandle GetFileInformationByHandleEx GetFileType GetFullPathNameW GetLastError GetProcessHeap GetStdHandle HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete MultiByteToWideChar SetConsoleMode SetConsoleTextAttribute SetFileInformationByHandle SetFileTime SetLastError SetThreadStackGuarantee Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue WaitForSingleObject WriteConsoleW DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _fmode _fpreset _initterm _onexit abort calloc exit fprintf free fwrite malloc memcmp memcpy memmove memset signal strlen strncmp vfprintf

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

486KB

Virtual Size

485KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

73KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_56d0aa82db933f21c4b67046bc7c0e19_akira_glassworm_quasar-rat

kernel32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

ntdll

msvcrt

generic