General
- Target 2026-09-09_c1f0ac840aa46a604601776a4612bda9_akira_glassworm_quasar-rat
- Size 2.9MB
- Sample260909-ppa8fswaph
- SHA256 15b161f90413dd194e910cad575e36f93fc4303207b169785c53f6f86d0b2d91
- MD5 c1f0ac840aa46a604601776a4612bda9
- SHA1 3b62de0ba022fbcb70c499ca1e9d59477cd96335
- SHA512 38ba2b8f1e94be856bcedc87624e5044f3a60568d14b066d4f6f14c3e39028a9a091f2db80e40725baffae6edf0f567059bec51c2ca5d1c76c3177958104cef4
- SSDEEP 49152:5ML4d0axt60tXV4zH+nFTY4G4QlKliQZH4IU6is:HbBZV4Gi4QlgFH+s
- TLSH T134E57D43F2A295ACC16AD0B8934BA632FB32BC9D46227BB717D087313E61B501F1DB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-09_c1f0ac840aa46a604601776a4612bda9_akira_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_c1f0ac840aa46a604601776a4612bda9_akira_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_c1f0ac840aa46a604601776a4612bda9_akira_glassworm_quasar-rat
- Size 2.9MB
- SHA256 15b161f90413dd194e910cad575e36f93fc4303207b169785c53f6f86d0b2d91
- MD5 c1f0ac840aa46a604601776a4612bda9
- SHA1 3b62de0ba022fbcb70c499ca1e9d59477cd96335
- SHA512 38ba2b8f1e94be856bcedc87624e5044f3a60568d14b066d4f6f14c3e39028a9a091f2db80e40725baffae6edf0f567059bec51c2ca5d1c76c3177958104cef4
- SSDEEP 49152:5ML4d0axt60tXV4zH+nFTY4G4QlKliQZH4IU6is:HbBZV4Gi4QlgFH+s
- TLSH T134E57D43F2A295ACC16AD0B8934BA632FB32BC9D46227BB717D087313E61B501F1DB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables using Telegram Chat Bot
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.