General
- Target 2026-07-05_b5654bb73caf48bc28b8688fd4830b46_akira_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_vidar
- Size 24.6MB
- Sample260705-gs27caat2t
- SHA256 0243517f98e6acadcfaba04999a2d5d1468e0e10039b52e97fce18c4ffd25497
- MD5 b5654bb73caf48bc28b8688fd4830b46
- SHA1 f5c75ea672313dd5eda64c44974c220afcc1a0d8
- SHA512 7b800fb44f802deb26d4416b78223a3ffd316babd9086bdd074d01cbdf02b4202c40151b153ad26982fb160ff1224972abfdf437241e002836c0db040e05ffd4
- SSDEEP 196608:C/ogoI+GpYC5lt5Fqkw9IpfbeiThbp19sn4BD0Z:CwgX+tCdK9mfPhbp19sn4y
- TLSH T183478C03FA2909EAE5ADC235856B47B27B313C99576023C71B64B1343FBBBD059BA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_b5654bb73caf48bc28b8688fd4830b46_akira_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_b5654bb73caf48bc28b8688fd4830b46_akira_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_vidar.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_b5654bb73caf48bc28b8688fd4830b46_akira_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_vidar
- Size 24.6MB
- SHA256 0243517f98e6acadcfaba04999a2d5d1468e0e10039b52e97fce18c4ffd25497
- MD5 b5654bb73caf48bc28b8688fd4830b46
- SHA1 f5c75ea672313dd5eda64c44974c220afcc1a0d8
- SHA512 7b800fb44f802deb26d4416b78223a3ffd316babd9086bdd074d01cbdf02b4202c40151b153ad26982fb160ff1224972abfdf437241e002836c0db040e05ffd4
- SSDEEP 196608:C/ogoI+GpYC5lt5Fqkw9IpfbeiThbp19sn4BD0Z:CwgX+tCdK9mfPhbp19sn4y
- TLSH T183478C03FA2909EAE5ADC235856B47B27B313C99576023C71B64B1343FBBBD059BA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger