Analysis
- max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
05/09/2026, 18:10
General
- Target 2026-09-04_11dc491b989ddc8385a877e99c2b18dd_akira_quasar-rat.exe
- Size 1.3MB
- Sample260905-wr4fcazcpb
- SHA256 1066c317d8a84fa947fecf753dfab772e929820177ef285ef6f33a951eba003f
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Adds Run key to start application 2 TTPs 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_11dc491b989ddc8385a877e99c2b18dd_akira_quasar-rat.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-04_11dc491b989ddc8385a877e99c2b18dd_akira_quasar-rat.exe"1⤵
- Adds Run key to start application
-
C:\Users\Admin\AppData\Roaming\shp\SHP\data\shp.exeC:\Users\Admin\AppData\Roaming\shp\SHP\data\shp.exe1⤵
- Executes dropped EXE
- Adds Run key to start application
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
shp.exe
memory/2692-6-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/2692-2-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/2692-24-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/2692-4-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/2692-22-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/2692-14-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/2692-20-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/2692-8-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/2692-10-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/2692-0-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/2692-12-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/2692-16-0x00007FF6F25E0000-0x00007FF6F2727000-memory.dmp
memory/4356-11-0x00007FF6FCD20000-0x00007FF6FCE67000-memory.dmp
memory/4356-13-0x00007FF6FCD20000-0x00007FF6FCE67000-memory.dmp
memory/4356-17-0x00007FF6FCD20000-0x00007FF6FCE67000-memory.dmp
memory/4356-19-0x00007FF6FCD20000-0x00007FF6FCE67000-memory.dmp
memory/4356-7-0x00007FF6FCD20000-0x00007FF6FCE67000-memory.dmp
memory/4356-21-0x00007FF6FCD20000-0x00007FF6FCE67000-memory.dmp
memory/4356-5-0x00007FF6FCD20000-0x00007FF6FCE67000-memory.dmp
memory/4356-3-0x00007FF6FCD20000-0x00007FF6FCE67000-memory.dmp
memory/4356-25-0x00007FF6FCD20000-0x00007FF6FCE67000-memory.dmp
memory/4356-27-0x00007FF6FCD20000-0x00007FF6FCE67000-memory.dmp