Analysis
- max time kernel
149s - max time network
132s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
13/09/2026, 00:00
General
- Target 2026-09-12_6b2fbfab939314234562e355acf91af3_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe
- Size 93.4MB
- Sample260913-aaawtahn2w
- SHA256 a19fce7dfd85822b3dcc3fad77b0d91ac2740fc5a739f5741a1d3294ca2135bb
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-12_6b2fbfab939314234562e355acf91af3_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-12_6b2fbfab939314234562e355acf91af3_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe"1⤵
- Checks computer location settings
- Maps connected drives based on registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/896-0-0x00000267F3472000-0x00000267F3473000-memory.dmp
memory/896-1-0x00000267F3470000-0x00000267F3471000-memory.dmp
memory/896-4-0x00000267F3475000-0x00000267F3476000-memory.dmp
memory/896-3-0x00000267F3474000-0x00000267F3475000-memory.dmp
memory/896-2-0x00000267F3473000-0x00000267F3474000-memory.dmp
memory/896-13-0x00000267F3477000-0x00000267F3478000-memory.dmp
memory/896-12-0x000002683346D000-0x000002683346E000-memory.dmp
memory/896-11-0x000002683346E000-0x000002683346F000-memory.dmp
memory/896-7-0x00000267F3476000-0x00000267F3477000-memory.dmp
memory/896-24-0x000002683346C000-0x000002683346D000-memory.dmp
memory/896-26-0x00000267F3471000-0x00000267F3472000-memory.dmp
memory/896-25-0x00000267F3479000-0x00000267F347A000-memory.dmp
memory/896-44-0x00000267F3472000-0x00000267F3473000-memory.dmp
memory/896-43-0x00000267F347C000-0x00000267F347D000-memory.dmp
memory/896-42-0x00000267F347A000-0x00000267F347B000-memory.dmp
memory/896-41-0x00000267F347B000-0x00000267F347C000-memory.dmp
memory/896-23-0x00000267F3478000-0x00000267F3479000-memory.dmp
memory/896-47-0x00000267F3481000-0x00000267F3482000-memory.dmp
memory/896-52-0x00000267F3484000-0x00000267F3485000-memory.dmp
memory/896-51-0x00000267F3477000-0x00000267F3478000-memory.dmp
memory/896-50-0x00000267F3475000-0x00000267F3476000-memory.dmp
memory/896-49-0x00000267F3482000-0x00000267F3483000-memory.dmp
memory/896-48-0x00000267F3483000-0x00000267F3484000-memory.dmp
memory/896-46-0x00000267F3480000-0x00000267F3481000-memory.dmp
memory/896-45-0x00000267F347F000-0x00000267F3480000-memory.dmp
memory/896-54-0x0000026833600000-0x0000026833800000-memory.dmp
memory/896-55-0x0000026833600000-0x0000026833800000-memory.dmp
memory/896-56-0x00000267A5800000-0x00000267A5A00000-memory.dmp
memory/896-53-0x00000267F3479000-0x00000267F347A000-memory.dmp
memory/896-57-0x00000267A5800000-0x00000267A5A00000-memory.dmp
memory/896-58-0x00000267A5800000-0x00000267A5A00000-memory.dmp