Analysis
- max time kernel
150s - max time network
155s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
05/08/2026, 06:09
General
- Target 2026-08-05_2862227940689a31e48287b28bdcf698_glassworm_quasar-rat.exe
- Size 12.1MB
- Sample260805-gwrvsabl51
- SHA256 ed8b11f5a4979b2834088a680ec013a559ba020fc755f3c89d3d1bdf47a82d83
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 29 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-05_2862227940689a31e48287b28bdcf698_glassworm_quasar-rat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-05_2862227940689a31e48287b28bdcf698_glassworm_quasar-rat.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
000002.dbtmp
CURRENT
MANIFEST-000001
memory/5900-62-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-64-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-58-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-59-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-60-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-56-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-63-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-57-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-65-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-66-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-67-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-68-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-69-0x0000000000F10000-0x0000000001B46000-memory.dmp
memory/5900-70-0x0000000000F10000-0x0000000001B46000-memory.dmp