55908df75b42e52224784ab00f49c334a80c2f67bbaa69906b37341e1a35e895

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 08:04

Target
2026-08-20_ade902082d47880c2a8bff2dff50c9b6_akira_glassworm_poet-rat_quasar-rat.exe
Size 45.2MB
Sample260820-jypjjssemb
SHA256 55908df75b42e52224784ab00f49c334a80c2f67bbaa69906b37341e1a35e895
MD5 ade902082d47880c2a8bff2dff50c9b6
SHA1 07e7699976fb3f16fbfb0671f70f7ec3e407f99f
SHA512 40b86762a2af55f5f79740e47615227980b7820b8ea6aefbfb314fbbdbf7d69be70de4ff55f5f45a40ebccf6e991853871cfa1ac0d174a6e3a2a459cf1922823
SSDEEP 196608:DC14TyOBR17JFsKOLHOwnvIPAVMwnlBp4buFQqkiINfcoUW5tTPJM1AvxtDrMQwC:y0VmQyMsXp41N3UWfTPJM1AvxtDrMEJ
TLSH
T12EA78D53F116099DC12BD63A82BB723AF33176596634AFBB0E885F355F12BD05B0A708
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5088	2026-08-20_ade902082d47880c2a8bff2dff50c9b6_akira_glassworm_poet-rat_quasar-rat.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-20_ade902082d47880c2a8bff2dff50c9b6_akira_glassworm_poet-rat_quasar-rat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_ade902082d47880c2a8bff2dff50c9b6_akira_glassworm_poet-rat_quasar-rat.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:5088