General
- Target 2026-08-19_06524d2704e9e41f707f550e5a47e371_akira_glassworm_quasar-rat
- Size 2.9MB
- Sample260820-a2n8hsaf62
- SHA256 e6383750490a5cc7e229e649252b92699031cd46d3f9fc103edcea885c95186c
- MD5 06524d2704e9e41f707f550e5a47e371
- SHA1 465259d53fdc5e147253610036d7f6f20dd79a1e
- SHA512 f35a51d91cc94cc189fe4b4430144f16f9aac4115195a4e4ad3122ecc311d4ad914881c800987547d69bf34f486a26c0e62a6d8009d5c916c04cc447d8b7715a
- SSDEEP 49152:ye9qpJzgVMxUFtEKYDOqp0yZntkIywUVi2EgarxJ3hPYumIU6iZ7:cJ8VYfiqBUgj/+Z7
- TLSH T125E57D43E2A180FDC16AC174875B9733FA32B8895530B6AF27D4DB212E26F506F1E719
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-19_06524d2704e9e41f707f550e5a47e371_akira_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-08-19_06524d2704e9e41f707f550e5a47e371_akira_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-08-19_06524d2704e9e41f707f550e5a47e371_akira_glassworm_quasar-rat
- Size 2.9MB
- SHA256 e6383750490a5cc7e229e649252b92699031cd46d3f9fc103edcea885c95186c
- MD5 06524d2704e9e41f707f550e5a47e371
- SHA1 465259d53fdc5e147253610036d7f6f20dd79a1e
- SHA512 f35a51d91cc94cc189fe4b4430144f16f9aac4115195a4e4ad3122ecc311d4ad914881c800987547d69bf34f486a26c0e62a6d8009d5c916c04cc447d8b7715a
- SSDEEP 49152:ye9qpJzgVMxUFtEKYDOqp0yZntkIywUVi2EgarxJ3hPYumIU6iZ7:cJ8VYfiqBUgj/+Z7
- TLSH T125E57D43E2A180FDC16AC174875B9733FA32B8895530B6AF27D4DB212E26F506F1E719
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables referencing virtualization MAC addresses
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1