General
- Target 2026-06-28_2686f6e26b6833b03caaf081e3922b51_coinminer_dosia_elex_glassworm_hive_poet-rat_quasar-rat_snatch
- Size 12.3MB
- Sample260628-3s15yagy2v
- SHA256 61367dec5932265f470d37aba152f8360a114868a4025a35d9856b6c4ff33a36
- MD5 2686f6e26b6833b03caaf081e3922b51
- SHA1 a9253cdfdea707233fc63660bf3ea71cec16a009
- SHA512 c6a424a20eac687e2b444bbd63b023af88b60bc730bce78bfd1bbe8f3649dcf40de39ecc1a5b4ba3ad3b7dd29ef52a43458c5914eee51ff6ec938e89a3ecfc2a
- SSDEEP 98304:G9TzWOrjVzCj9TS3Hr47fIEDuxIBoBE6nJ4nJzE:CWCW9TSX6fI0a/JWu
- TLSH T1E2D64A91FA8B94F5ED03183151ABA23F23315C048B28DB97EB447A2BFD776A11C7B605
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-28_2686f6e26b6833b03caaf081e3922b51_coinminer_dosia_elex_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_2686f6e26b6833b03caaf081e3922b51_coinminer_dosia_elex_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_2686f6e26b6833b03caaf081e3922b51_coinminer_dosia_elex_glassworm_hive_poet-rat_quasar-rat_snatch
- Size 12.3MB
- SHA256 61367dec5932265f470d37aba152f8360a114868a4025a35d9856b6c4ff33a36
- MD5 2686f6e26b6833b03caaf081e3922b51
- SHA1 a9253cdfdea707233fc63660bf3ea71cec16a009
- SHA512 c6a424a20eac687e2b444bbd63b023af88b60bc730bce78bfd1bbe8f3649dcf40de39ecc1a5b4ba3ad3b7dd29ef52a43458c5914eee51ff6ec938e89a3ecfc2a
- SSDEEP 98304:G9TzWOrjVzCj9TS3Hr47fIEDuxIBoBE6nJ4nJzE:CWCW9TSX6fI0a/JWu
- TLSH T1E2D64A91FA8B94F5ED03183151ABA23F23315C048B28DB97EB447A2BFD776A11C7B605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.