General
- Target 2026-06-26_fc718ade23fc8159cf71b939dfb8cb6c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.0MB
- Sample260629-mxgn4abs4s
- SHA256 cb4785f9348b8a9c3cc256daeb4f62e081f69c8c6c9d3a6757588d7c7a431890
- MD5 fc718ade23fc8159cf71b939dfb8cb6c
- SHA1 0f5f9495597023a49db0da3d939dd9f25a6a34cc
- SHA512 2f12cb37de1bcb2afeb985a8688e8b72fc5da520d01c7ed871bf322f093a000055171018c40008e3c7c3b1510f951c0ca02fe3e39d27a7eaa450465b4265d966
- SSDEEP 98304:WbSQ/TzCeo/9nbQ4IhOkBLWyopQ1uQnzzuCE:WeiSplbwwIc0umk
- TLSH T1DAC64A47E8B515E9C0ADD176CA269513BB717C884B3163D76B90FA242F37BD0AEB9300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_fc718ade23fc8159cf71b939dfb8cb6c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_fc718ade23fc8159cf71b939dfb8cb6c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260618-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_fc718ade23fc8159cf71b939dfb8cb6c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.0MB
- SHA256 cb4785f9348b8a9c3cc256daeb4f62e081f69c8c6c9d3a6757588d7c7a431890
- MD5 fc718ade23fc8159cf71b939dfb8cb6c
- SHA1 0f5f9495597023a49db0da3d939dd9f25a6a34cc
- SHA512 2f12cb37de1bcb2afeb985a8688e8b72fc5da520d01c7ed871bf322f093a000055171018c40008e3c7c3b1510f951c0ca02fe3e39d27a7eaa450465b4265d966
- SSDEEP 98304:WbSQ/TzCeo/9nbQ4IhOkBLWyopQ1uQnzzuCE:WeiSplbwwIc0umk
- TLSH T1DAC64A47E8B515E9C0ADD176CA269513BB717C884B3163D76B90FA242F37BD0AEB9300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory