Analysis
- max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
30/09/2026, 22:21
General
- Target 2026-09-29_337d04b37ee145232aedef18df8dea1e_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe
- Size 93.5MB
- Sample260930-196eways4p
- SHA256 7c1deaf3dd4d11811fff1d221fe4944a89cd98d8e48f3435c6fe374aadc9ec45
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
- Enumerates connected drives 3 TTPs 4 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_337d04b37ee145232aedef18df8dea1e_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_337d04b37ee145232aedef18df8dea1e_akira_glassworm_icedid_megazord_njrat_quasar-rat_rusty-s.exe"1⤵
- Checks computer location settings
- Enumerates connected drives
- Maps connected drives based on registry
- Reads the TCP/IP host and domain name from the registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2332-1-0x00000168F36B0000-0x00000168F36B1000-memory.dmp
memory/2332-0-0x00000168F36B2000-0x00000168F36B3000-memory.dmp
memory/2332-7-0x00000168F36B6000-0x00000168F36B7000-memory.dmp
memory/2332-6-0x00000168F36B7000-0x00000168F36B8000-memory.dmp
memory/2332-5-0x00000168F36B1000-0x00000168F36B2000-memory.dmp
memory/2332-4-0x00000168F36B5000-0x00000168F36B6000-memory.dmp
memory/2332-3-0x00000168F36B4000-0x00000168F36B5000-memory.dmp
memory/2332-2-0x00000168F36B3000-0x00000168F36B4000-memory.dmp
memory/2332-8-0x00000168F36B8000-0x00000168F36BA000-memory.dmp
memory/2332-38-0x00000168F36C0000-0x00000168F36C1000-memory.dmp
memory/2332-37-0x00000168F36BD000-0x00000168F36BE000-memory.dmp
memory/2332-45-0x00000168F36C4000-0x00000168F36C5000-memory.dmp
memory/2332-44-0x00000168F36C3000-0x00000168F36C4000-memory.dmp
memory/2332-43-0x00000168F36B5000-0x00000168F36B6000-memory.dmp
memory/2332-42-0x00000169336AD000-0x00000169336AE000-memory.dmp
memory/2332-41-0x00000169336AE000-0x00000169336AF000-memory.dmp
memory/2332-39-0x00000168F36B2000-0x00000168F36B3000-memory.dmp
memory/2332-40-0x00000168F36C2000-0x00000168F36C3000-memory.dmp
memory/2332-49-0x00000168F36C6000-0x00000168F36C7000-memory.dmp
memory/2332-48-0x00000168F36C5000-0x00000168F36C6000-memory.dmp
memory/2332-47-0x00000168F36B6000-0x00000168F36B7000-memory.dmp
memory/2332-46-0x00000168F36B7000-0x00000168F36B8000-memory.dmp
memory/2332-52-0x00000168E5A00000-0x00000168E5C00000-memory.dmp
memory/2332-51-0x00000168E5A00000-0x00000168E5C00000-memory.dmp
memory/2332-55-0x00000168E5A00000-0x00000168E5C00000-memory.dmp
memory/2332-54-0x00000168E5A00000-0x00000168E5C00000-memory.dmp
memory/2332-69-0x0000016933800000-0x0000016933A00000-memory.dmp
memory/2332-70-0x00000168F36D7000-0x00000168F36DA000-memory.dmp
memory/2332-68-0x00000168F36C7000-0x00000168F36C8000-memory.dmp
memory/2332-67-0x00000168F36D3000-0x00000168F36D4000-memory.dmp
memory/2332-66-0x00000168F36D2000-0x00000168F36D3000-memory.dmp
memory/2332-65-0x00000168F36D1000-0x00000168F36D2000-memory.dmp
memory/2332-64-0x00000168F36D0000-0x00000168F36D1000-memory.dmp
memory/2332-63-0x00000168F36CF000-0x00000168F36D0000-memory.dmp
memory/2332-62-0x00000168F36CE000-0x00000168F36CF000-memory.dmp
memory/2332-61-0x00000168F36CD000-0x00000168F36CE000-memory.dmp
memory/2332-60-0x00000168F36CB000-0x00000168F36CC000-memory.dmp
memory/2332-59-0x00000168F36CA000-0x00000168F36CB000-memory.dmp
memory/2332-58-0x00000168F36CC000-0x00000168F36CD000-memory.dmp
memory/2332-57-0x00000168F36C8000-0x00000168F36C9000-memory.dmp
memory/2332-56-0x00000168E5A00000-0x00000168E5C00000-memory.dmp
memory/2332-71-0x00000168E5A00000-0x00000168E5C00000-memory.dmp
memory/2332-53-0x00000168E5A00000-0x00000168E5C00000-memory.dmp
memory/2332-50-0x00000168F36B8000-0x00000168F36BA000-memory.dmp
memory/2332-72-0x00000168E5A00000-0x00000168E5C00000-memory.dmp