General
- Target 2026-05-17_b252a51ca9ce98bc748002cabea6bab6_coinminer_dosia_elex_ghostlocker_glassworm_poet-rat_quasar-rat
- Size 49.5MB
- Sample260517-msmdsaay8n
- SHA256 836b54d2d88eb0270f5221f42f5bb0977c6288a8349e419290545dab2b39cf37
- MD5 b252a51ca9ce98bc748002cabea6bab6
- SHA1 9ad6f0a85c5005349901b6c7ac879653b6ea388f
- SHA512 f6575b5d7605674ab189a52efe1147b2668f8d030b1122e60f95a0a3d39149edda12bc16eb64d209069c3f96579127ffded76afda22f0ed6e459ab979964aa46
- SSDEEP 196608:HutAPWkgNhr5Y31Gc0bizTe9dQ4r0rn6ufI212Y+/Zo7ik388Mw97s0l9MggRrTU:IBm3xtrn60kM8fMo0fMgpKUJ957
- TLSH T1E3B77D81FD8316F7EB8618B1C69F521F67346C01A776DA87E6153B25F8A32C24A3B311
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-17_b252a51ca9ce98bc748002cabea6bab6_coinminer_dosia_elex_ghostlocker_glassworm_poet-rat_quasar-rat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_b252a51ca9ce98bc748002cabea6bab6_coinminer_dosia_elex_ghostlocker_glassworm_poet-rat_quasar-rat
- Size 49.5MB
- SHA256 836b54d2d88eb0270f5221f42f5bb0977c6288a8349e419290545dab2b39cf37
- MD5 b252a51ca9ce98bc748002cabea6bab6
- SHA1 9ad6f0a85c5005349901b6c7ac879653b6ea388f
- SHA512 f6575b5d7605674ab189a52efe1147b2668f8d030b1122e60f95a0a3d39149edda12bc16eb64d209069c3f96579127ffded76afda22f0ed6e459ab979964aa46
- SSDEEP 196608:HutAPWkgNhr5Y31Gc0bizTe9dQ4r0rn6ufI212Y+/Zo7ik388Mw97s0l9MggRrTU:IBm3xtrn60kM8fMo0fMgpKUJ957
- TLSH T1E3B77D81FD8316F7EB8618B1C69F521F67346C01A776DA87E6153B25F8A32C24A3B311
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting