General
- Target 2026-08-07_dadc4b45b65dddb86672b631562a5a9c_akira_coinminer_glassworm_quasar-rat
- Size 9.8MB
- Sample260807-vmj1gaha38
- SHA256 db1a0847280b85830e2c54e74da98a5b6b8adfdddf2fcce5b8e21bbb1a66c29f
- MD5 dadc4b45b65dddb86672b631562a5a9c
- SHA1 9dce53ff6dc371ea144570eefddc1a0f6342fda6
- SHA512 f8702cec81241b23e7c82c459490ba28d6c116bdba4597a565ac9defae7f54dd8ee3e915407ccfecce2f84b318945f50d66303b3e23880b72ebefab30026eb0b
- SSDEEP 98304:54Ez0bhVqlZ1Aah0RBhAaHaOW8X4sMDl5ExyO1jYXX5oY+qyrXbPeNGfLILm:GPY0fMfgycYnPIrX7e+EL
- TLSH T1D5A66B57E1AA10EDC56BC170C35BA332BA31B85801347E7F2A94DBB12F61E502F6EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_dadc4b45b65dddb86672b631562a5a9c_akira_coinminer_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_dadc4b45b65dddb86672b631562a5a9c_akira_coinminer_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260710-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_dadc4b45b65dddb86672b631562a5a9c_akira_coinminer_glassworm_quasar-rat
- Size 9.8MB
- SHA256 db1a0847280b85830e2c54e74da98a5b6b8adfdddf2fcce5b8e21bbb1a66c29f
- MD5 dadc4b45b65dddb86672b631562a5a9c
- SHA1 9dce53ff6dc371ea144570eefddc1a0f6342fda6
- SHA512 f8702cec81241b23e7c82c459490ba28d6c116bdba4597a565ac9defae7f54dd8ee3e915407ccfecce2f84b318945f50d66303b3e23880b72ebefab30026eb0b
- SSDEEP 98304:54Ez0bhVqlZ1Aah0RBhAaHaOW8X4sMDl5ExyO1jYXX5oY+qyrXbPeNGfLILm:GPY0fMfgycYnPIrX7e+EL
- TLSH T1D5A66B57E1AA10EDC56BC170C35BA332BA31B85801347E7F2A94DBB12F61E502F6EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1