Overview

overview

6

Static

static

3

2026-11-13...ch.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-11-13_fda64132fe709a20bf027e2698791fae_akira_coinminer_dosia_glassworm_poet-rat_quasar-rat_rusty-stealer_snatch
  • Size 10.6MB
  • Sample261113-xt97cazz6l
  • SHA256 cb1caf52c839ed28b61b137bc6367558a0af4842eb4d8316f8a5c245f70fd5ad
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoveryexecutionpersistencespywaretrojan

Malware Config

Targets

    • Target
      2026-11-13_fda64132fe709a20bf027e2698791fae_akira_coinminer_dosia_glassworm_poet-rat_quasar-rat_rusty-stealer_snatch
    • Size 10.6MB
    • SHA256 cb1caf52c839ed28b61b137bc6367558a0af4842eb4d8316f8a5c245f70fd5ad
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    defense_evasiondiscoveryexecutionpersistencespywaretrojan

    • Adds Run key to start application

      persistence

    • Uses WMI to collect hardware manufacturer information

      Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Windows Management Instrumentation

1
T1047

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Defense Evasion

Modify Registry

3
T1112

Subvert Trust Controls

2
T1553

Install Root Certificate

2
T1553.004

Virtualization/Sandbox Evasion

1
T1497

System Checks

1
T1497.001

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

System Network Configuration Discovery

1
T1016

Virtualization/Sandbox Evasion

1
T1497

System Checks

1
T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks