321ec7ac1c434926401263bec480c4111befe79153ff66451ac107b6a042f632

General

Target
2026-07-02_556c8246f94df6e06d263494e6851d2c_akira_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat_rusty-stealer
Size 111.2MB
Sample260702-g5amvscy5s
SHA256 321ec7ac1c434926401263bec480c4111befe79153ff66451ac107b6a042f632
MD5 556c8246f94df6e06d263494e6851d2c
SHA1 8d6447570c3ccc852e7d62744c375c52365a6c37
SHA512 f0540187df9cdf2b64f4127cc2ea21e84c8771c3844920a41a5bd78cef1a5e5ae4515cae6a38f609bcc3cf8c8e280d2ffbe75297eed67e95c08140f9e64363bc
SSDEEP 196608:QZs9hz3k+oYuhXRmyiQvKiYYHMupfMYALFcS:QZsXz3pJudRmyiGvHMu9h0c
TLSH
T1FB48445495B447E98768267553327C5913EAD9E9C883249FC3A06BD52BFBF02E30E8F0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-02_556c8246f94df6e06d263494e6851d2c_akira_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat_rusty-stealer
- Size 111.2MB
- SHA256 321ec7ac1c434926401263bec480c4111befe79153ff66451ac107b6a042f632
- MD5 556c8246f94df6e06d263494e6851d2c
- SHA1 8d6447570c3ccc852e7d62744c375c52365a6c37
- SHA512 f0540187df9cdf2b64f4127cc2ea21e84c8771c3844920a41a5bd78cef1a5e5ae4515cae6a38f609bcc3cf8c8e280d2ffbe75297eed67e95c08140f9e64363bc
- SSDEEP 196608:QZs9hz3k+oYuhXRmyiQvKiYYHMupfMYALFcS:QZsXz3pJudRmyiGvHMu9h0c
- TLSH
  T1FB48445495B447E98768267553327C5913EAD9E9C883249FC3A06BD52BFBF02E30E8F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery spyware stealer adware persistence ransomware
- Enumerates VirtualBox DLL files
- Looks for VirtualBox drivers on disk
  defense_evasion
- Looks for VirtualBox executables on disk
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Looks for VMWare drivers on disk
  defense_evasion
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2