Analysis
- max time kernel
151s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
06/08/2026, 15:45
General
- Target 2026-08-06_29aae6320e8e6b04b4a29dc9dac1a3a9_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe
- Size 93.3MB
- Sample260806-s7b49avdmd
- SHA256 cc8335a1c4b39388b1c91888a626b3412879f6137c2073f14c1259260a098bf7
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_29aae6320e8e6b04b4a29dc9dac1a3a9_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-06_29aae6320e8e6b04b4a29dc9dac1a3a9_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe"1⤵
- Maps connected drives based on registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3256-0-0x00000176FE412000-0x00000176FE413000-memory.dmp
memory/3256-1-0x00000176FE410000-0x00000176FE411000-memory.dmp
memory/3256-2-0x00000176FE413000-0x00000176FE414000-memory.dmp
memory/3256-3-0x00000176FE414000-0x00000176FE415000-memory.dmp
memory/3256-15-0x00000176FE417000-0x00000176FE418000-memory.dmp
memory/3256-16-0x00000176FE416000-0x00000176FE417000-memory.dmp
memory/3256-13-0x00000176FE415000-0x00000176FE416000-memory.dmp
memory/3256-14-0x00000176FE411000-0x00000176FE412000-memory.dmp
memory/3256-17-0x00000176FE418000-0x00000176FE419000-memory.dmp
memory/3256-18-0x00000176FE419000-0x00000176FE41A000-memory.dmp
memory/3256-24-0x00000176FE41A000-0x00000176FE41C000-memory.dmp
memory/3256-25-0x00000176FE41C000-0x00000176FE41D000-memory.dmp
memory/3256-34-0x00000176FE41D000-0x00000176FE41E000-memory.dmp
memory/3256-33-0x00000176FE412000-0x00000176FE413000-memory.dmp
memory/3256-42-0x00000176FE41E000-0x00000176FE41F000-memory.dmp
memory/3256-46-0x00000176FE421000-0x00000176FE422000-memory.dmp
memory/3256-45-0x00000176FE422000-0x00000176FE423000-memory.dmp
memory/3256-44-0x00000176FE41F000-0x00000176FE421000-memory.dmp
memory/3256-43-0x00000176FE414000-0x00000176FE415000-memory.dmp
memory/3256-49-0x000001773E40D000-0x000001773E40E000-memory.dmp
memory/3256-48-0x00000176FE416000-0x00000176FE417000-memory.dmp
memory/3256-50-0x00000176FE423000-0x00000176FE424000-memory.dmp
memory/3256-47-0x00000176FE417000-0x00000176FE418000-memory.dmp
memory/3256-52-0x00000176FE424000-0x00000176FE425000-memory.dmp
memory/3256-51-0x00000176FE419000-0x00000176FE41A000-memory.dmp
memory/3256-53-0x00000176FC000000-0x00000176FD000000-memory.dmp
memory/3256-54-0x00000176FE425000-0x00000176FE426000-memory.dmp
memory/3256-55-0x00000176FC000000-0x00000176FD000000-memory.dmp
memory/3256-69-0x00000176FE427000-0x00000176FE429000-memory.dmp
memory/3256-77-0x00000176FE431000-0x00000176FE432000-memory.dmp
memory/3256-76-0x00000176FE430000-0x00000176FE431000-memory.dmp
memory/3256-75-0x00000176FE42F000-0x00000176FE430000-memory.dmp
memory/3256-74-0x00000176FE42E000-0x00000176FE42F000-memory.dmp
memory/3256-73-0x00000176FE42D000-0x00000176FE42E000-memory.dmp
memory/3256-72-0x00000176FE42C000-0x00000176FE42D000-memory.dmp
memory/3256-71-0x00000176FE42B000-0x00000176FE42C000-memory.dmp
memory/3256-70-0x00000176FE42A000-0x00000176FE42B000-memory.dmp
memory/3256-68-0x00000176FE429000-0x00000176FE42A000-memory.dmp
memory/3256-67-0x00000176FE426000-0x00000176FE427000-memory.dmp
memory/3256-66-0x00000176FC000000-0x00000176FD000000-memory.dmp
memory/3256-79-0x00000176FE432000-0x00000176FE433000-memory.dmp
memory/3256-80-0x00000176FC000000-0x00000176FD000000-memory.dmp
memory/3256-81-0x00000176FC000000-0x00000176FD000000-memory.dmp
memory/3256-83-0x00000176FE437000-0x00000176FE438000-memory.dmp
memory/3256-82-0x00000176FE435000-0x00000176FE437000-memory.dmp
memory/3256-84-0x00000176FC000000-0x00000176FD000000-memory.dmp