General
- Target 2026-11-03_78813fa88551dca9280d31e703f294fa_akira_coinminer_glassworm_quasar-rat
- Size 8.7MB
- Sample261104-typ57abv8w
- SHA256 d6b789ae187c11b5a1c57ec5b4624b781901697a55814003b9bb90a9336ea72d
- MD5 78813fa88551dca9280d31e703f294fa
- SHA1 ca113dd2512633e6043654635a08ad7d7ad3efae
- SHA512 90eacc841bee09da05d5522bae0953dee73960dc64b6732884a720d2917f921ebe8f52137f04bd7b9c2c03aaccf9e3df6f77b6d49d3d5205c5e7c4c777d554b6
- SSDEEP 98304:ml9mJJkTa7DvHSzgGjbNJbgLZy8wfFXtWlLoT3v1xZA8DvHY+gKAL0eeeGjEVaky:YIwG2vFhLXZA2ADKurwr0bo
- TLSH T1B7966B67E1AA10EDC56BC170C35BA332BA31B85400747E7F2A54DBB12F61E601F6EB64
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_78813fa88551dca9280d31e703f294fa_akira_coinminer_glassworm_quasar-rat.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_78813fa88551dca9280d31e703f294fa_akira_coinminer_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_78813fa88551dca9280d31e703f294fa_akira_coinminer_glassworm_quasar-rat
- Size 8.7MB
- SHA256 d6b789ae187c11b5a1c57ec5b4624b781901697a55814003b9bb90a9336ea72d
- MD5 78813fa88551dca9280d31e703f294fa
- SHA1 ca113dd2512633e6043654635a08ad7d7ad3efae
- SHA512 90eacc841bee09da05d5522bae0953dee73960dc64b6732884a720d2917f921ebe8f52137f04bd7b9c2c03aaccf9e3df6f77b6d49d3d5205c5e7c4c777d554b6
- SSDEEP 98304:ml9mJJkTa7DvHSzgGjbNJbgLZy8wfFXtWlLoT3v1xZA8DvHY+gKAL0eeeGjEVaky:YIwG2vFhLXZA2ADKurwr0bo
- TLSH T1B7966B67E1AA10EDC56BC170C35BA332BA31B85400747E7F2A54DBB12F61E601F6EB64
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1