Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/11/2026, 11:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe
- Size 26.9MB
- Sample261113-nhsngsty5p
- SHA256 1f1b9ee3a61e5ae1c5b00b812b7920419045db372a4a0e9e9aabeba4298f0531
- MD5 602dc521e8860d304832c7f309530d33
- SHA1 24d3ebc95c42e9fd2a74fd7bd3cda1b6f5b30760
- SHA512 f3374d9e89d4d923292c2774f9663d8f4823eb22aefc111b82435f976cca2b3afc4d6cc0765a3b60cfbc640f96869e449a91ce3cd08bf15bcde870852773b5f8
- SSDEEP 786432:laODBAoUJq9SP3vHF7dCKiVxD7QIIlmKbL8:laCBAoyq9SPflC
- TLSH T193573A4266970BECC963C277837B5B3BA7B5B89541243DAF6480CB704F92DF11B16A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks SCSI registry key(s) 3 TTPs 6 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags 2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters 2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags 2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters 2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5760 2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-11_602dc521e8860d304832c7f309530d33_akira_glassworm_poet-rat_quasar-rat.exe"1⤵
- Checks SCSI registry key(s)
- Suspicious use of SetWindowsHookEx
PID:5760