General
- Target 2026-07-17_2067686868104d9264ceb5a38ad5d558_akira_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat
- Size 17.8MB
- Sample260717-kblptafv9m
- SHA256 4e80398a796eeb14987deaa4f169d7a5dd0d5e9b907b7121bfbdd8fa98a9a348
- MD5 2067686868104d9264ceb5a38ad5d558
- SHA1 1436f1c0df0c31cdc5e1272ea67eb1c27233c610
- SHA512 8ec80183b3e0fff0fcf8333f80bdb5e7d924c2eeeaa188bc1501cd05aac14756cdc92aeb92a8fd4d8d3360f14b70b0555daf1e596f205aaf8f41ca539667cbe1
- SSDEEP 98304:pmYaGKC+0xyYtovDOvpolx4oEMpz5xov9tr5suEy6/rxa4URU+74JF1Npr:pCrYtorOvpoD4oEqxy5sLX/04j+aN
- TLSH T1D9175D07E8914AE5C8E9D130896292227F717C4A8B2027D73B70F6783F76BC49E7A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_2067686868104d9264ceb5a38ad5d558_akira_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_2067686868104d9264ceb5a38ad5d558_akira_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_2067686868104d9264ceb5a38ad5d558_akira_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat
- Size 17.8MB
- SHA256 4e80398a796eeb14987deaa4f169d7a5dd0d5e9b907b7121bfbdd8fa98a9a348
- MD5 2067686868104d9264ceb5a38ad5d558
- SHA1 1436f1c0df0c31cdc5e1272ea67eb1c27233c610
- SHA512 8ec80183b3e0fff0fcf8333f80bdb5e7d924c2eeeaa188bc1501cd05aac14756cdc92aeb92a8fd4d8d3360f14b70b0555daf1e596f205aaf8f41ca539667cbe1
- SSDEEP 98304:pmYaGKC+0xyYtovDOvpolx4oEMpz5xov9tr5suEy6/rxa4URU+74JF1Npr:pCrYtorOvpoD4oEqxy5sLX/04j+aN
- TLSH T1D9175D07E8914AE5C8E9D130896292227F717C4A8B2027D73B70F6783F76BC49E7A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.