General
- Target 2026-05-23_bbea01a958bdb320a04c6182c768f037_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_sliver_snatch
- Size 6.3MB
- Sample260523-2vhwpse18w
- SHA256 2dee5dcf033c81fa82cf742fe16ba412945068953382a8769b0b76acd80dce00
- MD5 bbea01a958bdb320a04c6182c768f037
- SHA1 5d85345ec513f5aff0089641755c6c47ff17e4eb
- SHA512 2983130fd79c0aa235f3f2dbbcc4fb6c3784ad9989b4d5c241a9a8fa77a93226b88304076fccc82aca89ced139b4e96de3d5532c76c3b07d527b9e17732bd010
- SSDEEP 49152:4FLTR98X1iAsLSWljmdAyFGEH7XFED1YNSXf1KjW+shpCZGo4c5NONPk+B5Ed0s:CTRmFpWzlSdAyFH7VEDYSRpnLCgEd0s
- TLSH T118666B12FDCB91F6EA03087155A7727F6B304D054B24CBD7EB407BAAF8BB2915836285
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-23_bbea01a958bdb320a04c6182c768f037_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_bbea01a958bdb320a04c6182c768f037_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_sliver_snatch.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_bbea01a958bdb320a04c6182c768f037_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_sliver_snatch
- Size 6.3MB
- SHA256 2dee5dcf033c81fa82cf742fe16ba412945068953382a8769b0b76acd80dce00
- MD5 bbea01a958bdb320a04c6182c768f037
- SHA1 5d85345ec513f5aff0089641755c6c47ff17e4eb
- SHA512 2983130fd79c0aa235f3f2dbbcc4fb6c3784ad9989b4d5c241a9a8fa77a93226b88304076fccc82aca89ced139b4e96de3d5532c76c3b07d527b9e17732bd010
- SSDEEP 49152:4FLTR98X1iAsLSWljmdAyFGEH7XFED1YNSXf1KjW+shpCZGo4c5NONPk+B5Ed0s:CTRmFpWzlSdAyFH7VEDYSRpnLCgEd0s
- TLSH T118666B12FDCB91F6EA03087155A7727F6B304D054B24CBD7EB407BAAF8BB2915836285
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables using Telegram Chat Bot
-
Modifies Windows Firewall
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1