General
- Target 2026-08-10_d7143e94db9692292a1fa448c9761502_akira_coinminer_rusty-stealer
- Size 921KB
- Sample260810-jzcldadn8w
- SHA256 18c73fb58a65ef856bcdfd8b2cca78328d3f3981b38b934a237a5e3fe5757d01
- MD5 d7143e94db9692292a1fa448c9761502
- SHA1 3d1ec4e3da5cadb51ad0a6757652cd84013c7e14
- SHA512 0acce87602ac51b0cef2d7ca9e3b48cba4081ab6bbfa3b61c149409eee9063b03a195e7753572e390559d7b1c23d5e08eff0278474c92cc0800763dc2081fbca
- SSDEEP 12288:K82l/PD0DOWC7fL4NjjznFOGkQO1Xend0HXpdqnrg53aoo:3QoRC7D6jzFbKf+S3Y
- TLSH T191154C07BA6594E8D5ABC43CC6574526AA2274DB0B31A7EF12C51A1D3F26BF4AF3C300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_d7143e94db9692292a1fa448c9761502_akira_coinminer_rusty-stealer.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_d7143e94db9692292a1fa448c9761502_akira_coinminer_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_d7143e94db9692292a1fa448c9761502_akira_coinminer_rusty-stealer
- Size 921KB
- SHA256 18c73fb58a65ef856bcdfd8b2cca78328d3f3981b38b934a237a5e3fe5757d01
- MD5 d7143e94db9692292a1fa448c9761502
- SHA1 3d1ec4e3da5cadb51ad0a6757652cd84013c7e14
- SHA512 0acce87602ac51b0cef2d7ca9e3b48cba4081ab6bbfa3b61c149409eee9063b03a195e7753572e390559d7b1c23d5e08eff0278474c92cc0800763dc2081fbca
- SSDEEP 12288:K82l/PD0DOWC7fL4NjjznFOGkQO1Xend0HXpdqnrg53aoo:3QoRC7D6jzFbKf+S3Y
- TLSH T191154C07BA6594E8D5ABC43CC6574526AA2274DB0B31A7EF12C51A1D3F26BF4AF3C300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many IR and analysis tools
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.