2026-07-05_b5654bb73caf48bc28b8688fd4830b46_akira_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_b5654bb73caf48bc28b8688fd4830b46_akira_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_vidar
Size 24.6MB
Sample260705-gs27caat2t
SHA256 0243517f98e6acadcfaba04999a2d5d1468e0e10039b52e97fce18c4ffd25497
MD5 b5654bb73caf48bc28b8688fd4830b46
SHA1 f5c75ea672313dd5eda64c44974c220afcc1a0d8
SHA512 7b800fb44f802deb26d4416b78223a3ffd316babd9086bdd074d01cbdf02b4202c40151b153ad26982fb160ff1224972abfdf437241e002836c0db040e05ffd4
SSDEEP 196608:C/ogoI+GpYC5lt5Fqkw9IpfbeiThbp19sn4BD0Z:CwgX+tCdK9mfPhbp19sn4y
TLSH
T183478C03FA2909EAE5ADC235856B47B27B313C99576023C71B64B1343FBBBD059BA350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_b5654bb73caf48bc28b8688fd4830b46_akira_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_vidar

File Explorer

2026-07-05_b5654bb73caf48bc28b8688fd4830b46_akira_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_vidar

.exe 24.6MB

2026-07-05_b5654bb73caf48bc28b8688fd4830b46_akira_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_vidar

IMPHASH b4fc36ec5667a9c8bfb10a481492c544
SHA256 0243517f98e6acadcfaba04999a2d5d1468e0e10039b52e97fce18c4ffd25497
MD5 b5654bb73caf48bc28b8688fd4830b46
SHA1 f5c75ea672313dd5eda64c44974c220afcc1a0d8
SHA512 7b800fb44f802deb26d4416b78223a3ffd316babd9086bdd074d01cbdf02b4202c40151b153ad26982fb160ff1224972abfdf437241e002836c0db040e05ffd4
SSDEEP 196608:C/ogoI+GpYC5lt5Fqkw9IpfbeiThbp19sn4BD0Z:CwgX+tCdK9mfPhbp19sn4y
TLSH
T183478C03FA2909EAE5ADC235856B47B27B313C99576023C71B64B1343FBBBD059BA350
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

gdi32

BitBlt CreateCompatibleDC CreateDIBSection DeleteDC DeleteObject GetDeviceCaps SelectObject

kernel32

AddVectoredContinueHandler AddVectoredExceptionHandler CloseHandle CreateEventA CreateIoCompletionPort CreateThread CreateWaitableTimerExW DeleteCriticalSection DuplicateHandle EnterCriticalSection ExitProcess FreeEnvironmentStringsW GetConsoleMode GetCurrentThreadId GetEnvironmentStringsW GetErrorMode GetLastError GetProcAddress GetProcessAffinityMask GetQueuedCompletionStatusEx GetStdHandle GetSystemDirectoryA GetSystemInfo GetThreadContext InitializeCriticalSection LeaveCriticalSection LoadLibraryExW MultiByteToWideChar PostQueuedCompletionStatus QueryPerformanceCounter RaiseFailFastException ResumeThread RtlLookupFunctionEntry RtlVirtualUnwind SetConsoleCtrlHandler SetErrorMode SetEvent SetProcessPriorityBoost SetThreadContext SetUnhandledExceptionFilter SetWaitableTimer Sleep SuspendThread SwitchToThread TlsAlloc TlsGetValue VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WerGetFlags WerSetFlags WideCharToMultiByte WriteConsoleW WriteFile __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _assert _cexit _commode _errno _fileno _fmode _initterm _lock _setmode _time64 _unlock abort atexit calloc clock exit fflush fprintf fputc free fwrite isleadbyte isupper localeconv malloc memcpy signal strcpy strerror strlen strncmp vfprintf wcslen

user32

ClientToScreen EnumDisplayMonitors EnumWindows GetClientRect GetCursorPos GetDC GetDesktopWindow GetForegroundWindow GetSystemMetrics GetWindowLongPtrA GetWindowRect GetWindowTextA GetWindowThreadProcessId IsWindow MapVirtualKeyA MessageBoxA PostMessageA PostMessageW ReleaseDC SendInput SetCursorPos SetForegroundWindow SetWindowPos ShowWindow VkKeyScanA

Name

.text

Size

6.5MB

Virtual Size

6.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9.6MB

Virtual Size

9.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8.2MB

Virtual Size

8.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

168KB

Virtual Size

167KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

32.4MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

77B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

154KB

Virtual Size

154KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_b5654bb73caf48bc28b8688fd4830b46_akira_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_vidar

gdi32

kernel32

msvcrt

user32

generic