2026-08-04_7d4fefc9eb572c14ae932ae8708360bc_akira_glassworm_quasar-rat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_7d4fefc9eb572c14ae932ae8708360bc_akira_glassworm_quasar-rat
Size 1.2MB
Sample260804-sm6hcscg49
SHA256 05cb701a084cd6c1f06718f56da3a79670f3d59bce6d10060299d46e20243809
MD5 7d4fefc9eb572c14ae932ae8708360bc
SHA1 74450c135202d48b48cd05eee7dd59ad466ecd1c
SHA512 085e0b323646ce303bc57ea5a11741d2442f58a346f417c147a28f7e3ffc3db53e7f0c1e010f64d6ae226beac7b24b0ac61e35fa2ebfc57f7c4c91963aa06829
SSDEEP 12288:0CttUU38DO8PO0V2/AlvbFg7Vv55yh3A4pxWua8rg3x0HpqI3ecdpjbh2fQ9L5H:0CLJgZV2/AleDEA4pxDaXxpEeOOo9R
TLSH
T1E8453C03AB9485FAC59EC07C8757923ABA3AB48F073076EB27D85B343E56B409B0D715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_7d4fefc9eb572c14ae932ae8708360bc_akira_glassworm_quasar-rat

File Explorer

2026-08-04_7d4fefc9eb572c14ae932ae8708360bc_akira_glassworm_quasar-rat

.exe 1.2MB

2026-08-04_7d4fefc9eb572c14ae932ae8708360bc_akira_glassworm_quasar-rat

IMPHASH ba81113c15834b9a8a2884f9b83a5125
SHA256 05cb701a084cd6c1f06718f56da3a79670f3d59bce6d10060299d46e20243809
MD5 7d4fefc9eb572c14ae932ae8708360bc
SHA1 74450c135202d48b48cd05eee7dd59ad466ecd1c
SHA512 085e0b323646ce303bc57ea5a11741d2442f58a346f417c147a28f7e3ffc3db53e7f0c1e010f64d6ae226beac7b24b0ac61e35fa2ebfc57f7c4c91963aa06829
SSDEEP 12288:0CttUU38DO8PO0V2/AlvbFg7Vv55yh3A4pxWua8rg3x0HpqI3ecdpjbh2fQ9L5H:0CLJgZV2/AleDEA4pxDaXxpEeOOo9R
TLSH
T1E8453C03AB9485FAC59EC07C8757923ABA3AB48F073076EB27D85B343E56B409B0D715
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegDeleteTreeW RegEnumKeyExW RegOpenKeyExW RegQueryValueExW

kernel32

AddVectoredExceptionHandler CompareStringOrdinal CreateEventW CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW FormatMessageW FreeEnvironmentStringsW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetStdHandle InitOnceBeginInitialize InitOnceComplete Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TlsAlloc TlsFree TlsGetValue TlsSetValue WaitForMultipleObjects WaitForSingleObject WriteConsoleW CancelIo CloseHandle CreateFileMappingA CreateFileW CreateIoCompletionPort DuplicateHandle FindClose FindFirstFileExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFinalPathNameByHandleW GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetQueuedCompletionStatusEx GetSystemDirectoryW GetSystemTimePreciseAsFileTime GetTempPathW GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc MapViewOfFile PostQueuedCompletionStatus ReadFile ReadFileEx SetFileCompletionNotificationModes SetFileInformationByHandle SetHandleInformation SetLastError UnmapViewOfFile WriteFileEx DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

crypt32

CertAddCertificateContextToStore CertCloseStore CertDuplicateCertificateChain CertDuplicateCertificateContext CertDuplicateStore CertEnumCertificatesInStore CertFreeCertificateChain CertFreeCertificateContext CertGetCertificateChain CertOpenStore CertVerifyCertificateChainPolicy

ntdll

NtCancelIoFileEx NtCreateFile NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile

secur32

AcceptSecurityContext AcquireCredentialsHandleA ApplyControlToken DecryptMessage DeleteSecurityContext EncryptMessage FreeContextBuffer FreeCredentialsHandle InitializeSecurityContextW QueryContextAttributesW

ws2_32

WSACleanup WSAGetLastError WSAIoctl WSASend WSASocketW WSAStartup bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket recv send setsockopt shutdown

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _fmode _fpreset _initterm _onexit abort calloc exit fprintf free fwrite malloc memcmp memcpy memmove memset signal strlen strncmp vfprintf

Name

.text

Size

788KB

Virtual Size

788KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

330KB

Virtual Size

330KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

36KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_7d4fefc9eb572c14ae932ae8708360bc_akira_glassworm_quasar-rat

advapi32

kernel32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

crypt32

ntdll

secur32

ws2_32

msvcrt

generic