General
- Target 2026-07-13_f5adc4fb1d3bae5fddea8cf705e6beaf_akira_coinminer_dosia_poet-rat_quasar-rat
- Size 37.5MB
- Sample260713-j9tmmsd13k
- SHA256 9cc56ed87c878aecef87604503f488c92f78ced438e28bde24d6f748eef2fedf
- MD5 f5adc4fb1d3bae5fddea8cf705e6beaf
- SHA1 0693551dd7552c355a755f8f62be8fd53e4e8dae
- SHA512 68a1f6a35ffaeeb8e57700c84acd6e8989b9deb8145cefbd8b263208b7950c574df0dd67e70c75e4fe0721be32adc6ce66d79b3fb9fff97ac12b370e14b34e52
- SSDEEP 196608:aSql/pmx3jzd7mfOms4Ddj5bP66cQE/j2eazpzbGSVoLQB8IPuBSeImJg:ax1pmNj57mxHcQE7PspzbGSVkJIPu8
- TLSH T11C872A67F8D21A88D4EAC570D772817BBA617C291B7813E71290B3201F3ABD0D7B6746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_f5adc4fb1d3bae5fddea8cf705e6beaf_akira_coinminer_dosia_poet-rat_quasar-rat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_f5adc4fb1d3bae5fddea8cf705e6beaf_akira_coinminer_dosia_poet-rat_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_f5adc4fb1d3bae5fddea8cf705e6beaf_akira_coinminer_dosia_poet-rat_quasar-rat
- Size 37.5MB
- SHA256 9cc56ed87c878aecef87604503f488c92f78ced438e28bde24d6f748eef2fedf
- MD5 f5adc4fb1d3bae5fddea8cf705e6beaf
- SHA1 0693551dd7552c355a755f8f62be8fd53e4e8dae
- SHA512 68a1f6a35ffaeeb8e57700c84acd6e8989b9deb8145cefbd8b263208b7950c574df0dd67e70c75e4fe0721be32adc6ce66d79b3fb9fff97ac12b370e14b34e52
- SSDEEP 196608:aSql/pmx3jzd7mfOms4Ddj5bP66cQE/j2eazpzbGSVoLQB8IPuBSeImJg:ax1pmNj57mxHcQE7PspzbGSVkJIPu8
- TLSH T11C872A67F8D21A88D4EAC570D772817BBA617C291B7813E71290B3201F3ABD0D7B6746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.