General
- Target 2026-06-27_471561349d19a0da9413f84694ca4991_akira_coinminer_glassworm_quasar-rat
- Size 59.1MB
- Sample260629-jpp4qaas6j
- SHA256 df08b0fe90ec07988e9bfbe598b32a6dbda3e4e81e35ed2120793e42dd67f565
- MD5 471561349d19a0da9413f84694ca4991
- SHA1 cf6960d642bceff568fb156397b97f807d632bbf
- SHA512 0c7e8397fcd836a6f509ee6eef5077626b74c2a6e38d1300cfe86ce155e55d1d874e7d75add1811fb7bf2e4ab8d11a8d146f18d41cf03890578c957c5a8e6660
- SSDEEP 393216:yXg9+MdDGPifJor5BMAIXEOYuOoq1qGCLNIwsP6BkKFdu9CwJsv6tOZx9WufCq1q:ysdq6G5Bjp7uNq1qZG6BHZxbfCq1q
- TLSH T121D77C03E29250E9D4BFD231875BE732FA31B8895734AB9F1554D7212E31EA06B3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_471561349d19a0da9413f84694ca4991_akira_coinminer_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_471561349d19a0da9413f84694ca4991_akira_coinminer_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260618-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_471561349d19a0da9413f84694ca4991_akira_coinminer_glassworm_quasar-rat
- Size 59.1MB
- SHA256 df08b0fe90ec07988e9bfbe598b32a6dbda3e4e81e35ed2120793e42dd67f565
- MD5 471561349d19a0da9413f84694ca4991
- SHA1 cf6960d642bceff568fb156397b97f807d632bbf
- SHA512 0c7e8397fcd836a6f509ee6eef5077626b74c2a6e38d1300cfe86ce155e55d1d874e7d75add1811fb7bf2e4ab8d11a8d146f18d41cf03890578c957c5a8e6660
- SSDEEP 393216:yXg9+MdDGPifJor5BMAIXEOYuOoq1qGCLNIwsP6BkKFdu9CwJsv6tOZx9WufCq1q:ysdq6G5Bjp7uNq1qZG6BHZxbfCq1q
- TLSH T121D77C03E29250E9D4BFD231875BE732FA31B8895734AB9F1554D7212E31EA06B3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.