2026-10-10_952882fcc9094ed4dd0aec9726cb9b61_akira_glassworm_quasar-rat

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-10_952882fcc9094ed4dd0aec9726cb9b61_akira_glassworm_quasar-rat
Size 12.8MB
Sample261011-jxac8sgx21
SHA256 58ffb74f8d2e33c852bad2a4aad4afe9080b620d70086db09176e860c1ddfe52
MD5 952882fcc9094ed4dd0aec9726cb9b61
SHA1 e7bcf30c6028e9959b11e367011524355c4287c5
SHA512 26f3157c535ed7ec5b16fa8f5479cbf154e9bc4974205a5dc722fd8198309e4541599264556f43e091ede2bb7402c665580fed239fb291e0e3b4f61945da8847
SSDEEP 196608:z2l3MnGG32Pme5ZmDXzAeiZ7idxq/dZW4dqdDINTGdXoJLdz0:ytM9mPKeNoxeormTGtoJZ
TLSH
T1A5D6E147E67292ECC11AC4B993166632FF21BC8D54367EBB1BD0CB312F61F50AA18B15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_952882fcc9094ed4dd0aec9726cb9b61_akira_glassworm_quasar-rat

File Explorer

2026-10-10_952882fcc9094ed4dd0aec9726cb9b61_akira_glassworm_quasar-rat

.exe 12.8MB

2026-10-10_952882fcc9094ed4dd0aec9726cb9b61_akira_glassworm_quasar-rat

IMPHASH 2ff54d75546fbd2880b6e7fb2ff30fd1
SHA256 58ffb74f8d2e33c852bad2a4aad4afe9080b620d70086db09176e860c1ddfe52
MD5 952882fcc9094ed4dd0aec9726cb9b61
SHA1 e7bcf30c6028e9959b11e367011524355c4287c5
SHA512 26f3157c535ed7ec5b16fa8f5479cbf154e9bc4974205a5dc722fd8198309e4541599264556f43e091ede2bb7402c665580fed239fb291e0e3b4f61945da8847
SSDEEP 196608:z2l3MnGG32Pme5ZmDXzAeiZ7idxq/dZW4dqdDINTGdXoJLdz0:ytM9mPKeNoxeormTGtoJZ
TLSH
T1A5D6E147E67292ECC11AC4B993166632FF21BC8D54367EBB1BD0CB312F61F50AA18B15
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

advapi32

SystemFunction036

bcrypt

BCryptGenRandom

kernel32

AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CreateEventW CreateFileMappingA CreateFileW CreateProcessW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DuplicateHandle EnterCriticalSection ExitProcess FindClose FindFirstFileExW FormatMessageW FreeEnvironmentStringsW FreeLibrary GetCommandLineW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileType GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTimePreciseAsFileTime GetTimeZoneInformationForYear GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection LeaveCriticalSection LoadLibraryExW MapViewOfFile Module32FirstW Module32NextW MoveFileExW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReadFileEx RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetConsoleMode SetEnvironmentVariableW SetFileInformationByHandle SetFileTime SetHandleInformation SetLastError SetThreadErrorMode SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFileEx __C_specific_handler

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _fmode _fpreset _initterm abort atexit calloc ceil exit fprintf free malloc memcmp memcpy memmove memset signal strlen strncmp vfprintf

ntdll

NtCreateNamedPipeFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

ws2_32

WSACleanup WSADuplicateSocketW WSAGetLastError WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockopt ioctlsocket listen recv select send setsockopt

Name

.text

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

9.6MB

Virtual Size

9.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

156KB

Virtual Size

155KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

800B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_952882fcc9094ed4dd0aec9726cb9b61_akira_glassworm_quasar-rat

bcryptprimitives

api-ms-win-core-synch-l1-2-0

advapi32

bcrypt

kernel32

msvcrt

ntdll

ws2_32

generic